Oval Definition:	oval:org.opensuse.security:def:4359
Revision Date: 2020-12-02 Version: 1 Title: Security update for the Linux Kernel (Live Patch 18 for SLE 15) (Important) Description: This update for the Linux Kernel 4.12.14-150_52 fixes several issues. The following security issues were fixed: - CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011). - CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722) - CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381). - CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069). - CVE-2020-24394: The NFS server code can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support. This occurs because the current umask is not considered (bsc#1175518). Family: unix Class: patch Status: Reference(s): 1046305 1046306 1046307 1051510 1065600 1081917 1082318 1083647 1086288 1086315 1086317 1086327 1086331 1086906 1087092 1090888 1097104 1097577 1097583 1097584 1097585 1097586 1097587 1097588 1097808 1100132 1101480 1101669 1101822 1102517 1102715 1103269 1103277 1103363 1103445 1103886 1104353 1104365 1104427 1104482 1104494 1104495 1104683 1104708 1104777 1104890 1104897 1105292 1105296 1105322 1105355 1105378 1105396 1105467 1105731 1129991 1133375 1144524 1146848 1152763 1153921 1154980 1157712 1157714 1159913 1160594 1160764 1161779 1163922 1165631 1166847 1168930 1172461 1172506 1172686 1173389 1173902 1173937 1173994 1174662 1175992 1176012 1176072 1176382 1176589 1176605 1176896 1177582 1177613 802154 971975 CVE-2018-10853 CVE-2018-10902 CVE-2018-15572 CVE-2018-9363 CVE-2019-13456 CVE-2019-17185 CVE-2019-18277 CVE-2019-3688 CVE-2019-3690 CVE-2019-3695 CVE-2019-3696 CVE-2019-5108 CVE-2019-9928 CVE-2020-0431 CVE-2020-11996 CVE-2020-13777 CVE-2020-13943 CVE-2020-14318 CVE-2020-14323 CVE-2020-14381 CVE-2020-14383 CVE-2020-14386 CVE-2020-15095 CVE-2020-1749 CVE-2020-24394 CVE-2020-25212 CVE-2020-5260 CVE-2020-8013 CVE-2020-8201 CVE-2020-8252 CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895 CVE-2020-9915 CVE-2020-9925 SUSE-SU-2018:2539-1 SUSE-SU-2019:3125-1 SUSE-SU-2020:0357-1 SUSE-SU-2020:0991-1 SUSE-SU-2020:1023-1 SUSE-SU-2020:1163-1 SUSE-SU-2020:1300-1 SUSE-SU-2020:1584-1 SUSE-SU-2020:1983-1 SUSE-SU-2020:2198-1 SUSE-SU-2020:2813-1 SUSE-SU-2020:3068-1 SUSE-SU-2020:3087-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Toolchain 12 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND python-pycrypto-2.6.1-1 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information cups-1.7.5-5 is installed OR cups-ddk-1.7.5-5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.62-60.62 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information cpp48-4.8.3+r212056-6 is installed OR gcc48-4.8.3+r212056-6 is installed OR gcc48-32bit-4.8.3+r212056-6 is installed OR gcc48-c++-4.8.3+r212056-6 is installed OR gcc48-gij-4.8.3+r212056-6 is installed OR gcc48-gij-32bit-4.8.3+r212056-6 is installed OR gcc48-info-4.8.3+r212056-6 is installed OR libasan0-4.8.3+r212056-6 is installed OR libasan0-32bit-4.8.3+r212056-6 is installed OR libatomic1-4.8.3+r212056-6 is installed OR libatomic1-32bit-4.8.3+r212056-6 is installed OR libffi4-4.8.3+r212056-6 is installed OR libffi4-32bit-4.8.3+r212056-6 is installed OR libgcc_s1-4.8.3+r212056-6 is installed OR libgcc_s1-32bit-4.8.3+r212056-6 is installed OR libgcj48-4.8.3+r212056-6 is installed OR libgcj48-32bit-4.8.3+r212056-6 is installed OR libgcj48-jar-4.8.3+r212056-6 is installed OR libgcj_bc1-4.8.3+r212056-6 is installed OR libgfortran3-4.8.3+r212056-6 is installed OR libgomp1-4.8.3+r212056-6 is installed OR libgomp1-32bit-4.8.3+r212056-6 is installed OR libitm1-4.8.3+r212056-6 is installed OR libitm1-32bit-4.8.3+r212056-6 is installed OR libquadmath0-4.8.3+r212056-6 is installed OR libstdc++48-devel-4.8.3+r212056-6 is installed OR libstdc++48-devel-32bit-4.8.3+r212056-6 is installed OR libstdc++6-4.8.3+r212056-6 is installed OR libstdc++6-32bit-4.8.3+r212056-6 is installed OR libtsan0-4.8.3+r212056-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information dbus-1-1.8.16-14 is installed OR dbus-1-x11-1.8.16-14 is installed OR libdbus-1-3-1.8.16-14 is installed OR libdbus-1-3-32bit-1.8.16-14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information dia-0.97.3-15 is installed OR dia-lang-0.97.3-15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR libnm-glib-vpn1-1.0.12-13.6 is installed OR libnm-glib4-1.0.12-13.6 is installed OR libnm-util2-1.0.12-13.6 is installed OR libnm0-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed OR typelib-1_0-NMClient-1_0-1.0.12-13.6 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-13.6 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND ctdb-4.4.2-29 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information cluster-md-kmp-default-4.12.14-25.16 is installed OR dlm-kmp-default-4.12.14-25.16 is installed OR gfs2-kmp-default-4.12.14-25.16 is installed OR kernel-default-4.12.14-25.16 is installed OR ocfs2-kmp-default-4.12.14-25.16 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND freeradius-server-3.0.16-3.6 is installed OR freeradius-server-devel-3.0.16-3.6 is installed OR freeradius-server-krb5-3.0.16-3.6 is installed OR freeradius-server-ldap-3.0.16-3.6 is installed OR freeradius-server-libs-3.0.16-3.6 is installed OR freeradius-server-mysql-3.0.16-3.6 is installed OR freeradius-server-perl-3.0.16-3.6 is installed OR freeradius-server-postgresql-3.0.16-3.6 is installed OR freeradius-server-python-3.0.16-3.6 is installed OR freeradius-server-sqlite-3.0.16-3.6 is installed OR freeradius-server-utils-3.0.16-3.6 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND freeradius-server-3.0.16-3.6 is installed OR freeradius-server-devel-3.0.16-3.6 is installed OR freeradius-server-krb5-3.0.16-3.6 is installed OR freeradius-server-ldap-3.0.16-3.6 is installed OR freeradius-server-libs-3.0.16-3.6 is installed OR freeradius-server-mysql-3.0.16-3.6 is installed OR freeradius-server-perl-3.0.16-3.6 is installed OR freeradius-server-postgresql-3.0.16-3.6 is installed OR freeradius-server-python-3.0.16-3.6 is installed OR freeradius-server-sqlite-3.0.16-3.6 is installed OR freeradius-server-utils-3.0.16-3.6 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_140-94_42-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_15-7-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP4 is installed AND Package Information kgraft-patch-4_12_14-95_32-default-2-2 is installed OR kgraft-patch-SLE12-SP4_Update_8-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND python-pycrypto-2.6.1-10.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND sles12sp2-docker-image-1.0.2-20180821 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.3-12 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.3-12 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.3-12 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.3-12 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_52-default-3-2 is installed OR kernel-livepatch-SLE15_Update_18-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Toolchain 12 is installed AND Package Information cpp5-5.3.1+r233831-9 is installed OR gcc5-5.3.1+r233831-9 is installed OR gcc5-c++-5.3.1+r233831-9 is installed OR gcc5-fortran-5.3.1+r233831-9 is installed OR gcc5-info-5.3.1+r233831-9 is installed OR gcc5-locale-5.3.1+r233831-9 is installed OR libffi-devel-gcc5-5.3.1+r233831-9 is installed OR libstdc++6-devel-gcc5-5.3.1+r233831-9 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information tomcat-9.0.36-3.3 is installed OR tomcat-admin-webapps-9.0.36-3.3 is installed OR tomcat-el-3_0-api-9.0.36-3.3 is installed OR tomcat-jsp-2_3-api-9.0.36-3.3 is installed OR tomcat-lib-9.0.36-3.3 is installed OR tomcat-servlet-4_0-api-9.0.36-3.3 is installed OR tomcat-webapps-9.0.36-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information acl-2.2.47-30.5.1 is installed OR libacl-2.2.47-30.5.1 is installed OR libacl-32bit-2.2.47-30.5.1 is installed OR libacl-x86-2.2.47-30.5.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND foomatic-filters-3.0.2-269.35.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information cups-filters-1.0.58-13 is installed OR cups-filters-cups-browsed-1.0.58-13 is installed OR cups-filters-foomatic-rip-1.0.58-13 is installed OR cups-filters-ghostscript-1.0.58-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information crash-7.1.8-3 is installed OR crash-kmp-default-7.1.8_k4.4.73_5-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND ppc64-diag-2.7.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND permissions-20180125-3.21 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND squid-4.11-5.17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND augeas-devel-0.9.0-3.15.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND checkbashisms-2.12.6-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information krb5-1.12.1-22.5 is installed OR krb5-devel-1.12.1-22.5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr3.60-31.2 is installed OR java-1_7_1-ibm-devel-1.7.1_sr3.60-31.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND raptor-2.0.10-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information empathy-3.12.12-5 is installed OR empathy-lang-3.12.12-5 is installed OR telepathy-mission-control-plugin-goa-3.12.12-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information ffmpeg-3.4.2-4.5 is installed OR libavcodec-devel-3.4.2-4.5 is installed OR libavformat-devel-3.4.2-4.5 is installed OR libavformat57-3.4.2-4.5 is installed OR libavresample-devel-3.4.2-4.5 is installed OR libavresample3-3.4.2-4.5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.4 is installed OR kernel-default-extra-4.12.14-197.4 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information libraw-0.18.9-3.11 is installed OR libraw-devel-0.18.9-3.11 is installed OR libraw16-0.18.9-3.11 is installed
BACK