Oval Definition:	oval:org.opensuse.security:def:4358
Revision Date: 2020-12-02 Version: 1 Title: Security update for the Linux Kernel (Live Patch 19 for SLE 15) (Important) Description: This update for the Linux Kernel 4.12.14-150_55 fixes several issues. The following security issues were fixed: - CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011). - CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722) - CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381). - CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069). - CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518). Family: unix Class: patch Status: Reference(s): 1051510 1051979 1065600 1066110 1066382 1077761 1086274 1086314 1087081 1089343 1099811 1099813 1099844 1099845 1099846 1099849 1099858 1099863 1099864 1100132 1101116 1101331 1101669 1101828 1101832 1101833 1101837 1101839 1101841 1101843 1101844 1101845 1101847 1101852 1101853 1101867 1101872 1101874 1101875 1101882 1101883 1101885 1101887 1101890 1101891 1101893 1101895 1101896 1101900 1101902 1101903 1102633 1102658 1103097 1103356 1103421 1103517 1103723 1103724 1103725 1103726 1103727 1103728 1103729 1103730 1103917 1103920 1103948 1103949 1104066 1104111 1104174 1104211 1104319 1142529 1149032 1152692 1155327 1158095 1159913 1161167 1162117 1162689 1162691 1163592 1164648 1165631 1166844 1166881 1166916 1167171 1167373 1168345 1169659 1170313 1170415 1172442 1172443 1172686 1172728 1173668 1173937 1174628 1175557 1175721 1175749 1175992 1176012 1176072 1176354 1176382 1176896 1177281 1177351 1177352 1177766 1177799 1177801 1177916 1178166 1178173 1178175 1178176 1178177 1178183 1178184 1178185 1178186 1178190 1178191 1178255 1178307 1178330 1178395 CVE-2018-10876 CVE-2018-10877 CVE-2018-10878 CVE-2018-10879 CVE-2018-10880 CVE-2018-10881 CVE-2018-10882 CVE-2018-10883 CVE-2018-3620 CVE-2018-3646 CVE-2018-5391 CVE-2019-12519 CVE-2019-12521 CVE-2019-12528 CVE-2019-14241 CVE-2019-14889 CVE-2019-18860 CVE-2019-5108 CVE-2020-0431 CVE-2020-0569 CVE-2020-10531 CVE-2020-11080 CVE-2020-11080 CVE-2020-11501 CVE-2020-11945 CVE-2020-14344 CVE-2020-14381 CVE-2020-14386 CVE-2020-15095 CVE-2020-1749 CVE-2020-24394 CVE-2020-25212 CVE-2020-25654 CVE-2020-25656 CVE-2020-25705 CVE-2020-7069 CVE-2020-7070 CVE-2020-7598 CVE-2020-7598 CVE-2020-8174 CVE-2020-8174 CVE-2020-8517 CVE-2020-8694 SUSE-SU-2018:2380-1 SUSE-SU-2019:3002-1 SUSE-SU-2020:0130-1 SUSE-SU-2020:0349-1 SUSE-SU-2020:0948-1 SUSE-SU-2020:1156-1 SUSE-SU-2020:1568-1 SUSE-SU-2020:1576-1 SUSE-SU-2020:2197-1 SUSE-SU-2020:2800-1 SUSE-SU-2020:2941-1 SUSE-SU-2020:3080-1 SUSE-SU-2020:3180-1 SUSE-SU-2020:3273-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP2 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information python-keystoneclient-1.0.0-14 is installed OR python-keystoneclient-doc-1.0.0-14 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.3.2-6 is installed OR libreoffice-sdk-4.3.3.2-6 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.51-60.25 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information cpio-2.11-26 is installed OR cpio-lang-2.11-26 is installed OR tar-1.27.1-2 is installed OR tar-lang-1.27.1-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information cyrus-sasl-2.1.26-7 is installed OR cyrus-sasl-32bit-2.1.26-7 is installed OR cyrus-sasl-crammd5-2.1.26-7 is installed OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed OR cyrus-sasl-digestmd5-2.1.26-7 is installed OR cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed OR cyrus-sasl-gssapi-2.1.26-7 is installed OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed OR cyrus-sasl-plain-2.1.26-7 is installed OR cyrus-sasl-plain-32bit-2.1.26-7 is installed OR cyrus-sasl-saslauthd-2.1.26-7 is installed OR libsasl2-3-2.1.26-7 is installed OR libsasl2-3-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information dhcp-4.3.3-9 is installed OR dhcp-client-4.3.3-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information at-3.1.14-7 is installed OR libQtWebKit4-4.8.6+2.3.3-3 is installed OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND conntrack-tools-1.4.2-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND ruby2.1-rubygem-bundler-1.7.3-3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information cluster-md-kmp-default-4.12.14-25.13 is installed OR dlm-kmp-default-4.12.14-25.13 is installed OR gfs2-kmp-default-4.12.14-25.13 is installed OR kernel-default-4.12.14-25.13 is installed OR ocfs2-kmp-default-4.12.14-25.13 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP2 is installed AND Package Information cluster-md-kmp-default-5.3.18-24.37 is installed OR dlm-kmp-default-5.3.18-24.37 is installed OR gfs2-kmp-default-5.3.18-24.37 is installed OR kernel-default-5.3.18-24.37 is installed OR ocfs2-kmp-default-5.3.18-24.37 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND libssh-0.7.5-6.9 is installed OR libssh-devel-0.7.5-6.9 is installed OR libssh4-0.7.5-6.9 is installed OR libssh4-32bit-0.7.5-6.9 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND libssh-0.7.5-6.9 is installed OR libssh-devel-0.7.5-6.9 is installed OR libssh4-0.7.5-6.9 is installed OR libssh4-32bit-0.7.5-6.9 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_175-94_79-default-1-4.7 is installed OR kgraft-patch-SLE12-SP3_Update_23-1-4.7 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP4 is installed AND Package Information kgraft-patch-4_12_14-95_29-default-3-2 is installed OR kgraft-patch-SLE12-SP4_Update_7-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.8.5-15.3 is installed OR puppet-server-3.8.5-15.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND Package Information ruby2.1-rubygem-passenger-5.0.18-12.9 is installed OR rubygem-passenger-5.0.18-12.9 is installed OR rubygem-passenger-apache2-5.0.18-12.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-70 is installed OR libopenssl0_9_8-0.9.8j-70 is installed OR libopenssl0_9_8-32bit-0.9.8j-70 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_55-default-3-2 is installed OR kernel-livepatch-SLE15_Update_19-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND python-requests-2.3.0-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information nodejs10-10.21.0-1.21 is installed OR nodejs10-devel-10.21.0-1.21 is installed OR nodejs10-docs-10.21.0-1.21 is installed OR npm10-10.21.0-1.21 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND procps-3.2.7-151.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information findutils-4.4.0-38.26.1 is installed OR findutils-locate-4.4.0-38.26.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information augeas-1.2.0-3 is installed OR augeas-lenses-1.2.0-3 is installed OR libaugeas0-1.2.0-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information cups-1.7.5-12 is installed OR cups-client-1.7.5-12 is installed OR cups-libs-1.7.5-12 is installed OR cups-libs-32bit-1.7.5-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cracklib-2.9.0-7 is installed OR libcrack2-2.9.0-7 is installed OR libcrack2-32bit-2.9.0-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND powerpc-utils-1.3.5-3 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND squid-4.11-5.17 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information python2-salt-2019.2.0-5.67 is installed OR python3-salt-2019.2.0-5.67 is installed OR salt-2019.2.0-5.67 is installed OR salt-api-2019.2.0-5.67 is installed OR salt-bash-completion-2019.2.0-5.67 is installed OR salt-cloud-2019.2.0-5.67 is installed OR salt-doc-2019.2.0-5.67 is installed OR salt-fish-completion-2019.2.0-5.67 is installed OR salt-master-2019.2.0-5.67 is installed OR salt-minion-2019.2.0-5.67 is installed OR salt-proxy-2019.2.0-5.67 is installed OR salt-ssh-2019.2.0-5.67 is installed OR salt-standalone-formulas-configuration-2019.2.0-5.67 is installed OR salt-syndic-2019.2.0-5.67 is installed OR salt-zsh-completion-2019.2.0-5.67 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information php53-devel-5.3.17-0.31.1 is installed OR php53-imap-5.3.17-0.31.1 is installed OR php53-posix-5.3.17-0.31.1 is installed OR php53-readline-5.3.17-0.31.1 is installed OR php53-sockets-5.3.17-0.31.1 is installed OR php53-sqlite-5.3.17-0.31.1 is installed OR php53-tidy-5.3.17-0.31.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND bind-devel-9.9.5P1-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information kernel-docs-3.12.51-60.20.2 is installed OR kernel-obs-build-3.12.51-60.20.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libXi-1.7.4-17.1 is installed OR libXi-devel-1.7.4-17.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND python-devel-2.7.7-2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information dia-0.97.3-15 is installed OR dia-lang-0.97.3-15 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND bash-lang-4.3-82 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND enigmail-2.0.7-3.7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.7.0-3.36 is installed OR MozillaThunderbird-translations-common-60.7.0-3.36 is installed OR MozillaThunderbird-translations-other-60.7.0-3.36 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information openconnect-7.08-6.9 is installed OR openconnect-devel-7.08-6.9 is installed OR openconnect-lang-7.08-6.9 is installed
BACK