Oval Definition:	oval:org.opensuse.security:def:4310
Revision Date: 2020-12-02 Version: 1 Title: Security update for the Linux Kernel (Live Patch 10 for SLE 15) (Important) Description: This update for the Linux Kernel 4.12.14-150_17 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321). - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108). Family: unix Class: patch Status: Reference(s): 1046303 1046305 1046306 1046307 1046540 1046542 1046543 1047238 1048129 1050242 1050252 1050529 1050536 1050538 1050545 1050549 1050662 1050911 1051510 1052766 1054914 1055117 1055968 1056427 1056643 1056651 1056653 1056657 1056658 1056662 1056686 1056787 1058115 1058513 1058659 1058717 1060463 1060662 1061024 1061840 1061843 1062897 1064597 1064701 1064802 1065600 1065729 1066110 1066129 1066369 1068032 1068054 1071009 1071218 1071306 1071995 1072829 1072856 1073513 1073765 1073960 1074562 1074578 1074701 1074741 1074873 1074919 1075006 1075007 1075262 1075419 1075748 1075876 1076049 1076115 1076372 1076830 1077338 1078248 1078353 1079152 1079747 1080039 1080542 1081599 1082485 1082504 1082555 1082635 1082869 1082962 1083647 1083900 1084001 1084570 1085030 1085308 1085536 1085539 1085626 1085933 1085936 1085937 1085938 1085939 1085941 1086103 1086282 1086283 1086286 1086288 1086319 1086323 1086400 1086652 1086739 1087078 1087082 1087084 1087092 1087205 1087210 1087213 1087214 1087284 1087405 1087458 1087939 1087978 1088354 1088690 1088704 1088722 1088796 1088804 1088821 1088866 1089115 1089268 1089467 1089608 1089663 1089664 1089667 1089669 1089752 1089753 1089878 1090150 1090457 1090605 1090643 1090646 1090658 1090734 1090888 1090953 1091158 1091171 1091424 1091594 1091666 1091678 1091686 1091781 1091782 1091815 1091860 1091960 1092100 1092472 1092710 1092772 1092888 1092904 1092975 1093023 1093027 1093035 1093118 1093148 1093158 1093184 1093205 1093273 1093290 1093604 1093641 1093649 1093653 1093655 1093657 1093663 1093721 1093728 1093904 1093990 1094244 1094356 1094420 1094541 1094575 1094751 1094825 1094840 1094912 1094978 1095042 1095094 1095115 1095155 1095265 1095321 1095337 1095467 1095573 1095735 1095893 1096065 1096480 1096529 1096696 1096705 1096728 1096753 1096790 1096793 1097034 1097105 1097234 1097356 1097373 1097439 1097465 1097468 1097470 1097471 1097472 1097551 1097780 1097796 1097800 1097941 1097961 1098016 1098043 1098050 1098174 1098176 1098236 1098401 1098425 1098435 1098599 1098626 1098706 1098983 1098995 1099029 1099041 1099109 1099142 1099183 1099715 1099792 1099918 1099924 1099966 1100132 1100209 1100340 1100362 1100382 1100394 1100416 1100418 1100491 1100602 1100633 1100843 1101296 1101315 1101324 1102097 1103990 1104353 1104427 1104745 1104902 1104967 1106061 1106284 1106434 1108382 1109837 1111666 1112178 1112374 1112894 1112899 1112902 1112903 1112905 1112906 1112907 1113722 1113994 1114279 1114542 1114828 1116600 1118689 1119086 1119113 1120046 1120876 1120902 1123105 1123959 1124370 1129424 1129519 1129664 1131107 1131281 1131489 1131565 1133021 1134291 1134476 1134881 1134882 1135219 1135642 1135897 1135990 1136039 1136261 1136346 1136349 1136352 1136496 1136498 1136502 1136682 1137322 1137323 1137884 1138099 1138100 1138539 1139020 1139021 1139101 1139500 1139924 1140012 1140426 1140487 1141320 1141340 1141450 1141543 1141554 1142019 1142076 1142109 1142117 1142118 1142119 1142496 1142541 1142635 1142685 1142701 1142857 1143300 1143331 1143466 1143706 1143738 1143765 1143841 1143843 1143962 1144123 1144333 1144375 1144474 1144518 1144582 1144718 1144813 1144880 1144886 1144912 1144920 1144979 1145010 1145018 1145051 1145059 1145095 1145189 1145235 1145256 1145300 1145302 1145357 1145388 1145389 1145390 1145391 1145392 1145393 1145394 1145395 1145396 1145397 1145408 1145409 1145446 1145661 1145678 1145687 1145920 1145922 1145934 1145937 1145940 1145941 1145942 1145946 1146074 1146084 1146141 1146163 1146215 1146285 1146346 1146351 1146352 1146360 1146361 1146368 1146376 1146378 1146381 1146391 1146399 1146413 1146425 1146516 1146519 1146524 1146526 1146529 1146531 1146543 1146547 1146550 1146575 1146589 1146657 1146678 1146938 1148031 1148032 1148033 1148034 1148035 1148093 1148133 1148192 1148196 1148198 1148202 1148219 1148297 1148303 1148308 1148363 1148379 1148394 1148527 1148570 1148574 1148616 1148617 1148619 1148698 1148859 1148868 1149053 1149083 1149104 1149105 1149106 1149197 1149214 1149224 1149325 1149376 1149413 1149418 1149424 1149522 1149527 1149539 1149552 1149591 1149602 1149612 1149626 1149652 1149713 1149792 1149940 1149976 1150025 1150033 1150112 1150562 1150727 1150860 1150861 1150933 1151793 1152107 1153108 1156321 1158755 1159352 1159548 1160850 1160852 1160888 1160903 1160905 1162002 1170011 1170771 1171078 1171252 1171254 1171673 1171732 1171868 1172257 1172686 1172775 1172781 1172782 1172783 1172999 1173265 1173280 1173514 1173567 1173573 1173659 1173937 1173999 1174000 1174115 1174462 1174543 1174910 1174913 971975 975772 CVE-2017-18551 CVE-2017-5715 CVE-2017-5753 CVE-2018-1000200 CVE-2018-1000204 CVE-2018-10087 CVE-2018-10124 CVE-2018-1092 CVE-2018-1093 CVE-2018-1094 CVE-2018-1118 CVE-2018-1120 CVE-2018-1130 CVE-2018-12233 CVE-2018-13053 CVE-2018-13405 CVE-2018-13406 CVE-2018-16471 CVE-2018-20976 CVE-2018-21008 CVE-2018-3639 CVE-2018-5803 CVE-2018-5848 CVE-2018-7492 CVE-2018-8781 CVE-2018-9385 CVE-2019-0199 CVE-2019-10086 CVE-2019-10207 CVE-2019-10220 CVE-2019-11041 CVE-2019-11042 CVE-2019-13272 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14835 CVE-2019-14902 CVE-2019-14907 CVE-2019-15030 CVE-2019-15031 CVE-2019-15090 CVE-2019-15098 CVE-2019-15099 CVE-2019-15117 CVE-2019-15118 CVE-2019-15211 CVE-2019-15212 CVE-2019-15214 CVE-2019-15215 CVE-2019-15216 CVE-2019-15217 CVE-2019-15218 CVE-2019-15219 CVE-2019-15220 CVE-2019-15221 CVE-2019-15222 CVE-2019-15239 CVE-2019-15290 CVE-2019-15292 CVE-2019-15538 CVE-2019-15666 CVE-2019-15902 CVE-2019-15917 CVE-2019-15919 CVE-2019-15920 CVE-2019-15921 CVE-2019-15924 CVE-2019-15926 CVE-2019-15927 CVE-2019-16746 CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 CVE-2019-16782 CVE-2019-18902 CVE-2019-19344 CVE-2019-20908 CVE-2019-9456 CVE-2020-0305 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10769 CVE-2020-10773 CVE-2020-12243 CVE-2020-12653 CVE-2020-12654 CVE-2020-12771 CVE-2020-12888 CVE-2020-13974 CVE-2020-14361 CVE-2020-14362 CVE-2020-14416 CVE-2020-15095 CVE-2020-15393 CVE-2020-15780 CVE-2020-7216 SUSE-SU-2018:2092-1 SUSE-SU-2019:1825-1 SUSE-SU-2019:2245-1 SUSE-SU-2019:2424-1 SUSE-SU-2019:2503-1 SUSE-SU-2019:3248-1 SUSE-SU-2020:0043-1 SUSE-SU-2020:0223-1 SUSE-SU-2020:0263-1 SUSE-SU-2020:0359-1 SUSE-SU-2020:1219-1 SUSE-SU-2020:2398-1 SUSE-SU-2020:2870-1 Platform(s): SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP2 SUSE Linux Enterprise for SAP 11 SP3 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.3.2-6 is installed OR libreoffice-sdk-4.3.3.2-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND cifs-utils-6.4-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information cups-filters-1.0.58-8 is installed OR cups-filters-cups-browsed-1.0.58-8 is installed OR cups-filters-foomatic-rip-1.0.58-8 is installed OR cups-filters-ghostscript-1.0.58-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND ft2demos-2.6.3-7.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information ImageMagick-6.8.8.1-70 is installed OR libMagick++-6_Q16-3-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-70 is installed OR libMagickWand-6_Q16-1-6.8.8.1-70 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND lighttpd-1.4.35-1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND python-requests-2.8.1-6.16 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND libpcreposix0-8.39-8.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information cluster-md-kmp-default-4.12.14-25.3 is installed OR dlm-kmp-default-4.12.14-25.3 is installed OR gfs2-kmp-default-4.12.14-25.3 is installed OR kernel-default-4.12.14-25.3 is installed OR ocfs2-kmp-default-4.12.14-25.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information cluster-md-kmp-default-4.12.14-197.18 is installed OR dlm-kmp-default-4.12.14-197.18 is installed OR gfs2-kmp-default-4.12.14-197.18 is installed OR kernel-default-4.12.14-197.18 is installed OR ocfs2-kmp-default-4.12.14-197.18 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND libldap-2_4-2-2.4.46-9.28 is installed OR libldap-2_4-2-32bit-2.4.46-9.28 is installed OR libldap-data-2.4.46-9.28 is installed OR openldap2-2.4.46-9.28 is installed OR openldap2-client-2.4.46-9.28 is installed OR openldap2-devel-2.4.46-9.28 is installed OR openldap2-devel-32bit-2.4.46-9.28 is installed OR openldap2-devel-static-2.4.46-9.28 is installed OR openldap2-ppolicy-check-password-1.2-9.28 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND libldap-2_4-2-2.4.46-9.28 is installed OR libldap-2_4-2-32bit-2.4.46-9.28 is installed OR libldap-data-2.4.46-9.28 is installed OR openldap2-2.4.46-9.28 is installed OR openldap2-client-2.4.46-9.28 is installed OR openldap2-devel-2.4.46-9.28 is installed OR openldap2-devel-32bit-2.4.46-9.28 is installed OR openldap2-devel-static-2.4.46-9.28 is installed OR openldap2-ppolicy-check-password-1.2-9.28 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_82-6_9-default-6-2 is installed OR kgraft-patch-SLE12-SP3_Update_3-6-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP4 is installed AND Package Information kgraft-patch-4_12_14-95_19-default-1-6.3 is installed OR kgraft-patch-SLE12-SP4_Update_5-1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information python2-salt-2018.3.0-46.44 is installed OR salt-2018.3.0-46.44 is installed OR salt-api-2018.3.0-46.44 is installed OR salt-bash-completion-2018.3.0-46.44 is installed OR salt-cloud-2018.3.0-46.44 is installed OR salt-doc-2018.3.0-46.44 is installed OR salt-master-2018.3.0-46.44 is installed OR salt-minion-2018.3.0-46.44 is installed OR salt-proxy-2018.3.0-46.44 is installed OR salt-ssh-2018.3.0-46.44 is installed OR salt-syndic-2018.3.0-46.44 is installed OR salt-zsh-completion-2018.3.0-46.44 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_17-default-6-2 is installed OR kernel-livepatch-SLE15_Update_10-6-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND Package Information tomcat-9.0.21-3.27 is installed OR tomcat-admin-webapps-9.0.21-3.27 is installed OR tomcat-el-3_0-api-9.0.21-3.27 is installed OR tomcat-jsp-2_3-api-9.0.21-3.27 is installed OR tomcat-lib-9.0.21-3.27 is installed OR tomcat-servlet-4_0-api-9.0.21-3.27 is installed OR tomcat-webapps-9.0.21-3.27 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information nodejs8-8.17.0-3.38 is installed OR nodejs8-devel-8.17.0-3.38 is installed OR nodejs8-docs-8.17.0-3.38 is installed OR npm8-8.17.0-3.38 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information kernel-default-3.0.101-0.47.90.1 is installed OR kernel-default-base-3.0.101-0.47.90.1 is installed OR kernel-default-devel-3.0.101-0.47.90.1 is installed OR kernel-ec2-3.0.101-0.47.90.1 is installed OR kernel-ec2-base-3.0.101-0.47.90.1 is installed OR kernel-ec2-devel-3.0.101-0.47.90.1 is installed OR kernel-pae-3.0.101-0.47.90.1 is installed OR kernel-pae-base-3.0.101-0.47.90.1 is installed OR kernel-pae-devel-3.0.101-0.47.90.1 is installed OR kernel-source-3.0.101-0.47.90.1 is installed OR kernel-syms-3.0.101-0.47.90.1 is installed OR kernel-trace-3.0.101-0.47.90.1 is installed OR kernel-trace-base-3.0.101-0.47.90.1 is installed OR kernel-trace-devel-3.0.101-0.47.90.1 is installed OR kernel-xen-3.0.101-0.47.90.1 is installed OR kernel-xen-base-3.0.101-0.47.90.1 is installed OR kernel-xen-devel-3.0.101-0.47.90.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND aaa_base-11-6.105.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information apache-commons-daemon-1.0.15-4 is installed OR apache-commons-daemon-javadoc-1.0.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information alsa-1.0.27.2-15 is installed OR alsa-docs-1.0.27.2-15 is installed OR libasound2-1.0.27.2-15 is installed OR libasound2-32bit-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND libwavpack1-4.60.99-5.3 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information cups-2.2.7-3.17 is installed OR cups-client-2.2.7-3.17 is installed OR cups-config-2.2.7-3.17 is installed OR cups-ddk-2.2.7-3.17 is installed OR cups-devel-2.2.7-3.17 is installed OR libcups2-2.2.7-3.17 is installed OR libcups2-32bit-2.2.7-3.17 is installed OR libcupscgi1-2.2.7-3.17 is installed OR libcupsimage2-2.2.7-3.17 is installed OR libcupsmime1-2.2.7-3.17 is installed OR libcupsppdc1-2.2.7-3.17 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.28.1-3.49 is installed OR libwebkit2gtk-4_0-37-2.28.1-3.49 is installed OR libwebkit2gtk3-lang-2.28.1-3.49 is installed OR webkit2gtk-4_0-injected-bundles-2.28.1-3.49 is installed OR webkit2gtk3-2.28.1-3.49 is installed OR webkit2gtk3-devel-2.28.1-3.49 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND rubygem-rack-1_3-1.3.10-0.5.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND alsa-devel-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information bind-9.9.6P1-35.1 is installed OR bind-devel-9.9.6P1-35.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information ghostscript-9.15-17.2 is installed OR ghostscript-devel-9.15-17.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND xfsprogs-devel-4.3.0-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information gcc48-gij-4.8.5-30 is installed OR gcc48-gij-32bit-4.8.5-30 is installed OR libgcj48-4.8.5-30 is installed OR libgcj48-32bit-4.8.5-30 is installed OR libgcj48-jar-4.8.5-30 is installed OR libgcj_bc1-4.8.5-30 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-60.3.0-3.17 is installed OR MozillaThunderbird-translations-common-60.3.0-3.17 is installed OR MozillaThunderbird-translations-other-60.3.0-3.17 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-68.2.1-3.58 is installed OR MozillaThunderbird-translations-common-68.2.1-3.58 is installed OR MozillaThunderbird-translations-other-68.2.1-3.58 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information freerdp-2.1.2-15.10 is installed OR freerdp-devel-2.1.2-15.10 is installed OR libfreerdp2-2.1.2-15.10 is installed OR libwinpr2-2.1.2-15.10 is installed OR winpr2-devel-2.1.2-15.10 is installed
BACK