Oval Definition:	oval:org.opensuse.security:def:1313
Revision Date: 2022-04-15 Version: 1 Title: Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP3) (Important) Description: This update for the Linux Kernel 5.3.18-59_5 fixes several issues. The following security issues were fixed: - CVE-2022-27666: Fixed a buffer overflow vulnerability in IPsec ESP transformation code. This flaw allowed a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation. (bnc#1197462) - CVE-2021-39698: Fixed a possible memory corruption due to a use after free in aio_poll_complete_work. This could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1196956) - CVE-2022-22942: Fixed stale file descriptors on failed usercopy. (bsc#1195065) Family: unix Class: patch Status: Reference(s): 1013708 1013712 1013893 1015171 1195951 1196959 1197133 CVE-2012-2451 CVE-2013-7447 CVE-2016-6855 CVE-2016-9797 CVE-2016-9797 CVE-2016-9798 CVE-2016-9798 CVE-2016-9802 CVE-2016-9802 CVE-2016-9917 CVE-2016-9917 CVE-2021-39698 CVE-2022-22942 CVE-2022-27666 SUSE-SU-2019:1353-1 SUSE-SU-2022:1246-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP3 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND python-pymongo-2.6.3-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information eog-3.26.2-3.39 is installed OR eog-devel-3.26.2-3.39 is installed OR eog-lang-3.26.2-3.39 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Micro 5.1 is installed OR SUSE Linux Enterprise Micro 5.2 is installed OR SUSE Linux Enterprise Module for Live Patching 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed AND kernel-livepatch-5_3_18-59_5-default-12-150300.2.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information bluez-5.48-5.16 is installed OR libbluetooth3-5.48-5.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 is installed AND perl-Config-IniFiles-2.94-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-23-default-7-19 is installed OR kernel-livepatch-SLE15_Update_0-7-19 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information libpng16-16-1.6.8-2 is installed OR libpng16-16-32bit-1.6.8-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information xen-4.5.1_12-2.3 is installed OR xen-doc-html-4.5.1_12-2.3 is installed OR xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 is installed OR xen-libs-4.5.1_12-2.3 is installed OR xen-libs-32bit-4.5.1_12-2.3 is installed OR xen-tools-4.5.1_12-2.3 is installed OR xen-tools-domU-4.5.1_12-2.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND ant-1.9.4-1.6 is installed
BACK