Oval Definition:	oval:org.opensuse.security:def:4346
Revision Date: 2020-12-02 Version: 1 Title: Security update for the Linux Kernel (Live Patch 10 for SLE 15) (Important) Description: This update for the Linux Kernel 4.12.14-150_17 fixes several issues. The following security issues were fixed: - CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157). - CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155). Family: unix Class: patch Status: Reference(s): 1058115 1065729 1071995 1085030 1100369 1103203 1109160 1118367 1118368 1128220 1132091 1139924 1140844 1148868 1149792 1152472 1152489 1152990 1152992 1152994 1152995 1153274 1154353 1154492 1155518 1155798 1156205 1156395 1157051 1157169 1157465 1158050 1158095 1158242 1158265 1158748 1158765 1158983 1159284 1159352 1159723 1159729 1159781 1159867 1160467 1160468 1160947 1161168 1161495 1162002 1162063 1162327 1162396 1162400 1162702 1163102 1163103 1163104 1164648 1164777 1164780 1164804 1165211 1165572 1165933 1165975 1166985 1167104 1167240 1167437 1167651 1167773 1168230 1168340 1168404 1168407 1168779 1168838 1168959 1169021 1169066 1169094 1169194 1169514 1169604 1169681 1169771 1169800 1170011 1170104 1170284 1170288 1170442 1170595 1170617 1170667 1170713 1170774 1170879 1170891 1170895 1171150 1171189 1171191 1171219 1171220 1171246 1171313 1171417 1171513 1171529 1171530 1171662 1171688 1171699 1171732 1171739 1171740 1171743 1171759 1171828 1171857 1171868 1171904 1171906 1171915 1171982 1171983 1171988 1172017 1172046 1172061 1172062 1172063 1172064 1172065 1172066 1172067 1172068 1172069 1172073 1172075 1172086 1172095 1172169 1172170 1172201 1172208 1172223 1172342 1172343 1172344 1172365 1172366 1172374 1172391 1172393 1172394 1172453 1172458 1172467 1172484 1172537 1172543 1172687 1172719 1172739 1172751 1172759 1172775 1172781 1172782 1172783 1172814 1172823 1172841 1172871 1172938 1172939 1172940 1172956 1172958 1172983 1172984 1172985 1172986 1172987 1172988 1172989 1172990 1172999 1173060 1173068 1173072 1173074 1173085 1173139 1173206 1173271 1173280 1173284 1173307 1173311 1173428 1173438 1173461 1173514 1173552 1173573 1173625 1173746 1173776 1173817 1173818 1173820 1173822 1173823 1173824 1173825 1173826 1173827 1173828 1173830 1173831 1173832 1173833 1173834 1173836 1173837 1173838 1173839 1173841 1173843 1173844 1173845 1173847 1173849 1173860 1173894 1173941 1173983 1174018 1174072 1174116 1174117 1174121 1174126 1174127 1174128 1174129 1174165 1174185 1174244 1174263 1174264 1174331 1174332 1174333 1174345 1174356 1174396 1174398 1174407 1174409 1174411 1174438 1174462 1174513 1174527 1174543 1174627 1175443 1176092 1176674 1177513 1177729 1178003 906079 962849 CVE-2012-6708 CVE-2015-9251 CVE-2017-3136 CVE-2018-5741 CVE-2019-10072 CVE-2019-11023 CVE-2019-12418 CVE-2019-14889 CVE-2019-14896 CVE-2019-14897 CVE-2019-15604 CVE-2019-15605 CVE-2019-15606 CVE-2019-15845 CVE-2019-16201 CVE-2019-16254 CVE-2019-16255 CVE-2019-16775 CVE-2019-16776 CVE-2019-16777 CVE-2019-17563 CVE-2019-18897 CVE-2019-19462 CVE-2019-20810 CVE-2019-20812 CVE-2019-6477 CVE-2020-0305 CVE-2020-0430 CVE-2020-10135 CVE-2020-10711 CVE-2020-10732 CVE-2020-10751 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10773 CVE-2020-10781 CVE-2020-11651 CVE-2020-11652 CVE-2020-12351 CVE-2020-12656 CVE-2020-12769 CVE-2020-12771 CVE-2020-12888 CVE-2020-13143 CVE-2020-13934 CVE-2020-13935 CVE-2020-13974 CVE-2020-14416 CVE-2020-15393 CVE-2020-15780 CVE-2020-1927 CVE-2020-1934 CVE-2020-1938 CVE-2020-25645 CVE-2020-5267 CVE-2020-8130 CVE-2020-8616 CVE-2020-8617 CVE-2020-8618 CVE-2020-8619 CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 SUSE-SU-2019:1267-1 SUSE-SU-2020:0029-1 SUSE-SU-2020:0043-1 SUSE-SU-2020:0130-1 SUSE-SU-2020:0454-1 SUSE-SU-2020:0737-1 SUSE-SU-2020:1126-1 SUSE-SU-2020:1178-1 SUSE-SU-2020:1973-1 SUSE-SU-2020:2046-1 SUSE-SU-2020:2047-1 SUSE-SU-2020:2105-1 SUSE-SU-2020:2914-1 SUSE-SU-2020:3441-1 Platform(s): SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SP3 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP2 SUSE Linux Enterprise High Availability Extension 11 SP2 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for High Performance Computing 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Web Scripting 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information cups-1.7.5-5 is installed OR cups-ddk-1.7.5-5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.59-60.41 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information alsa-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND clamav-0.98.7-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information cpp48-4.8.5-30 is installed OR gcc48-4.8.5-30 is installed OR gcc48-32bit-4.8.5-30 is installed OR gcc48-c++-4.8.5-30 is installed OR gcc48-gij-4.8.5-30 is installed OR gcc48-gij-32bit-4.8.5-30 is installed OR gcc48-info-4.8.5-30 is installed OR libasan0-4.8.5-30 is installed OR libasan0-32bit-4.8.5-30 is installed OR libgcj48-4.8.5-30 is installed OR libgcj48-32bit-4.8.5-30 is installed OR libgcj48-jar-4.8.5-30 is installed OR libgcj_bc1-4.8.5-30 is installed OR libstdc++48-devel-4.8.5-30 is installed OR libstdc++48-devel-32bit-4.8.5-30 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information alsa-1.0.27.2-15 is installed OR libasound2-1.0.27.2-15 is installed OR libasound2-32bit-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP3 is installed AND python-requests-2.8.1-6.16 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND python-requests-2.11.1-6.28 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information graphviz-addons-2.40.1-6.3 is installed OR graphviz-gd-2.40.1-6.3 is installed OR graphviz-python-2.40.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP2 is installed AND Package Information cluster-md-kmp-default-5.3.18-24.9 is installed OR dlm-kmp-default-5.3.18-24.9 is installed OR gfs2-kmp-default-5.3.18-24.9 is installed OR kernel-default-5.3.18-24.9 is installed OR ocfs2-kmp-default-5.3.18-24.9 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND apache2-2.4.33-3.30 is installed OR apache2-devel-2.4.33-3.30 is installed OR apache2-doc-2.4.33-3.30 is installed OR apache2-prefork-2.4.33-3.30 is installed OR apache2-utils-2.4.33-3.30 is installed OR apache2-worker-2.4.33-3.30 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND apache2-2.4.33-3.30 is installed OR apache2-devel-2.4.33-3.30 is installed OR apache2-doc-2.4.33-3.30 is installed OR apache2-prefork-2.4.33-3.30 is installed OR apache2-utils-2.4.33-3.30 is installed OR apache2-worker-2.4.33-3.30 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_114-94_11-default-11-2 is installed OR kgraft-patch-SLE12-SP3_Update_8-11-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP4 is installed AND Package Information kgraft-patch-4_12_14-95_19-default-3-2 is installed OR kgraft-patch-SLE12-SP4_Update_5-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND Package Information ruby2.1-rubygem-rack-1_4-1.4.5-8 is installed OR rubygem-rack-1_4-1.4.5-8 is installed Definition Synopsis SUSE Linux Enterprise Module for High Performance Computing 12 is installed AND Package Information libpmi0-17.02.11-6.33 is installed OR libslurm31-17.02.11-6.33 is installed OR perl-slurm-17.02.11-6.33 is installed OR slurm-17.02.11-6.33 is installed OR slurm-auth-none-17.02.11-6.33 is installed OR slurm-config-17.02.11-6.33 is installed OR slurm-devel-17.02.11-6.33 is installed OR slurm-doc-17.02.11-6.33 is installed OR slurm-lua-17.02.11-6.33 is installed OR slurm-munge-17.02.11-6.33 is installed OR slurm-pam_slurm-17.02.11-6.33 is installed OR slurm-plugins-17.02.11-6.33 is installed OR slurm-sched-wiki-17.02.11-6.33 is installed OR slurm-slurmdb-direct-17.02.11-6.33 is installed OR slurm-slurmdbd-17.02.11-6.33 is installed OR slurm-sql-17.02.11-6.33 is installed OR slurm-torque-17.02.11-6.33 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-66 is installed OR libopenssl0_9_8-0.9.8j-66 is installed OR libopenssl0_9_8-32bit-0.9.8j-66 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_17-default-7-2 is installed OR kernel-livepatch-SLE15_Update_10-7-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Toolchain 12 is installed AND Package Information cpp5-5.3.1+r233831-9 is installed OR gcc5-5.3.1+r233831-9 is installed OR gcc5-c++-5.3.1+r233831-9 is installed OR gcc5-fortran-5.3.1+r233831-9 is installed OR gcc5-info-5.3.1+r233831-9 is installed OR gcc5-locale-5.3.1+r233831-9 is installed OR libffi-devel-gcc5-5.3.1+r233831-9 is installed OR libstdc++6-devel-gcc5-5.3.1+r233831-9 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed AND Package Information tomcat-9.0.36-4.41 is installed OR tomcat-admin-webapps-9.0.36-4.41 is installed OR tomcat-el-3_0-api-9.0.36-4.41 is installed OR tomcat-jsp-2_3-api-9.0.36-4.41 is installed OR tomcat-lib-9.0.36-4.41 is installed OR tomcat-servlet-4_0-api-9.0.36-4.41 is installed OR tomcat-webapps-9.0.36-4.41 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information tomcat-9.0.36-3.6 is installed OR tomcat-admin-webapps-9.0.36-3.6 is installed OR tomcat-el-3_0-api-9.0.36-3.6 is installed OR tomcat-jsp-2_3-api-9.0.36-3.6 is installed OR tomcat-lib-9.0.36-3.6 is installed OR tomcat-servlet-4_0-api-9.0.36-3.6 is installed OR tomcat-webapps-9.0.36-3.6 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS is installed AND Package Information rhn-virtualization-common-5.4.15-0.15.2 is installed OR rhn-virtualization-host-5.4.15-0.15.2 is installed OR rhncfg-5.9.33-0.20.1 is installed OR rhncfg-actions-5.9.33-0.20.1 is installed OR rhncfg-client-5.9.33-0.20.1 is installed OR rhncfg-management-5.9.33-0.20.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information e2fsprogs-1.41.9-2.14.3 is installed OR libcom_err2-1.41.9-2.14.3 is installed OR libcom_err2-32bit-1.41.9-2.14.3 is installed OR libcom_err2-x86-1.41.9-2.14.3 is installed OR libext2fs2-1.41.9-2.14.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information MozillaFirefox-38.4.0esr-51 is installed OR MozillaFirefox-translations-38.4.0esr-51 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information bzip2-1.0.6-29 is installed OR bzip2-doc-1.0.6-29 is installed OR libbz2-1-1.0.6-29 is installed OR libbz2-1-32bit-1.0.6-29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information bind-9.9.9P1-62 is installed OR bind-chrootenv-9.9.9P1-62 is installed OR bind-doc-9.9.9P1-62 is installed OR bind-libs-9.9.9P1-62 is installed OR bind-libs-32bit-9.9.9P1-62 is installed OR bind-utils-9.9.9P1-62 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND pcsc-ccid-1.4.25-4 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libjavascriptcoregtk-4_0-18-2.28.2-3.54 is installed OR libwebkit2gtk-4_0-37-2.28.2-3.54 is installed OR libwebkit2gtk3-lang-2.28.2-3.54 is installed OR webkit2gtk-4_0-injected-bundles-2.28.2-3.54 is installed OR webkit2gtk3-2.28.2-3.54 is installed OR webkit2gtk3-devel-2.28.2-3.54 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information gnutls-3.6.7-6.29 is installed OR libgnutls-devel-3.6.7-6.29 is installed OR libgnutls30-3.6.7-6.29 is installed OR libgnutls30-32bit-3.6.7-6.29 is installed OR libgnutls30-hmac-3.6.7-6.29 is installed OR libgnutls30-hmac-32bit-3.6.7-6.29 is installed OR libgnutlsxx-devel-3.6.7-6.29 is installed OR libgnutlsxx28-3.6.7-6.29 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information ImageMagick-6.4.3.6-7.30.1 is installed OR ImageMagick-devel-6.4.3.6-7.30.1 is installed OR libMagick++-devel-6.4.3.6-7.30.1 is installed OR libMagick++1-6.4.3.6-7.30.1 is installed OR libMagickWand1-6.4.3.6-7.30.1 is installed OR libMagickWand1-32bit-6.4.3.6-7.30.1 is installed OR perl-PerlMagick-6.4.3.6-7.30.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information FastCGI-2.4.0-167 is installed OR perl-FastCGI-2.4.0-167 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr3.20-18.1 is installed OR java-1_7_1-ibm-devel-1.7.1_sr3.20-18.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information sudo-1.8.10p3-8.1 is installed OR sudo-devel-1.8.10p3-8.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information libqt4-sql-mysql-32bit-4.8.6-2 is installed OR libqt4-sql-postgresql-4.8.6-2 is installed OR libqt4-sql-postgresql-32bit-4.8.6-2 is installed OR libqt4-sql-sqlite-32bit-4.8.6-2 is installed OR libqt4-sql-unixODBC-4.8.6-2 is installed OR libqt4-sql-unixODBC-32bit-4.8.6-2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information ImageMagick-6.8.8.1-70 is installed OR libMagick++-6_Q16-3-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-70 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information bluez-5.48-5.8 is installed OR bluez-cups-5.48-5.8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.7.0-3.36 is installed OR MozillaThunderbird-translations-common-60.7.0-3.36 is installed OR MozillaThunderbird-translations-other-60.7.0-3.36 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information LibVNCServer-0.9.10-4.19 is installed OR libvncclient0-0.9.10-4.19 is installed OR libvncserver0-0.9.10-4.19 is installed
BACK