Oval Definition:	oval:org.opensuse.security:def:4365
Revision Date: 2020-12-07 Version: 1 Title: Security update for the Linux Kernel (Live Patch 4 for SLE 12 SP5) (Important) Description: This update for the Linux Kernel 4.12.14-122_20 fixes several issues. The following security issues were fixed: - CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622). - CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700). - CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783). - Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046). Family: unix Class: patch Status: Reference(s): 1046303 1046305 1046306 1046307 1046540 1046542 1046543 1048129 1050242 1050252 1050529 1050536 1050538 1050545 1050549 1050662 1051510 1051979 1052766 1055968 1056427 1056643 1056651 1056653 1056657 1056658 1056662 1056686 1056787 1058115 1058513 1058659 1058717 1060463 1061024 1061840 1062897 1064802 1065600 1066110 1066129 1068032 1068054 1071218 1071995 1072829 1072856 1073513 1073765 1073960 1074562 1074578 1074701 1074741 1074873 1074919 1075006 1075007 1075262 1075419 1075748 1075876 1076049 1076115 1076372 1076830 1077338 1077761 1078248 1078353 1079152 1079747 1080039 1080542 1081599 1082485 1082504 1082869 1082962 1083647 1083900 1084001 1084570 1085308 1085539 1085626 1085933 1085936 1085937 1085938 1085939 1085941 1086274 1086282 1086283 1086286 1086288 1086314 1086319 1086323 1086400 1086652 1086739 1087078 1087081 1087082 1087084 1087092 1087205 1087210 1087213 1087214 1087284 1087405 1087458 1087939 1087978 1088354 1088690 1088704 1088722 1088796 1088804 1088821 1088866 1089115 1089268 1089343 1089467 1089608 1089663 1089664 1089667 1089669 1089752 1089753 1089878 1090150 1090457 1090605 1090643 1090646 1090658 1090734 1090888 1090953 1091158 1091171 1091424 1091594 1091666 1091678 1091686 1091781 1091782 1091815 1091860 1091960 1092100 1092472 1092710 1092772 1092888 1092904 1092975 1093023 1093027 1093035 1093118 1093148 1093158 1093184 1093205 1093273 1093290 1093604 1093641 1093649 1093653 1093655 1093657 1093663 1093721 1093728 1093904 1093990 1094244 1094356 1094420 1094541 1094555 1094575 1094751 1094825 1094840 1094912 1094978 1095042 1095094 1095115 1095155 1095265 1095321 1095337 1095467 1095573 1095735 1095893 1096065 1096480 1096529 1096696 1096705 1096728 1096753 1096790 1096793 1097034 1097105 1097234 1097356 1097373 1097439 1097465 1097468 1097470 1097471 1097472 1097551 1097780 1097796 1097800 1097941 1097961 1098016 1098043 1098050 1098174 1098176 1098236 1098401 1098425 1098435 1098599 1098626 1098706 1098983 1098995 1099029 1099041 1099109 1099142 1099183 1099715 1099792 1099811 1099813 1099844 1099845 1099846 1099849 1099858 1099863 1099864 1099918 1099924 1099966 1100132 1100209 1100340 1100362 1100382 1100394 1100416 1100418 1100491 1100602 1100633 1100843 1101116 1101296 1101315 1101324 1101331 1101669 1101828 1101832 1101833 1101837 1101839 1101841 1101843 1101844 1101845 1101847 1101852 1101853 1101867 1101872 1101874 1101875 1101882 1101883 1101885 1101887 1101890 1101891 1101893 1101895 1101896 1101900 1101902 1101903 1102633 1102658 1103097 1103356 1103421 1103517 1103723 1103724 1103725 1103726 1103727 1103728 1103729 1103730 1103917 1103920 1103948 1103949 1104066 1104111 1104174 1104211 1104319 1111666 1112374 1114279 1117632 1128432 1134730 1134738 1135153 1135296 1135642 1136156 1136157 1136271 1136333 1137103 1137194 1137366 1137884 1137985 1138263 1138264 1138336 1138374 1138375 1138589 1138681 1138719 1138732 1154862 1160611 1160612 1160613 1160614 1160615 1162689 1162691 1163985 1167373 1169659 1169851 1170313 1170595 1170603 1175070 1175071 1175074 1177351 1177352 1177513 1177729 1178003 1178046 1178622 1178700 1178783 971975 975772 CVE-2017-5715 CVE-2017-5753 CVE-2018-1000200 CVE-2018-1000204 CVE-2018-10087 CVE-2018-10124 CVE-2018-10876 CVE-2018-10877 CVE-2018-10878 CVE-2018-10879 CVE-2018-10880 CVE-2018-10881 CVE-2018-10882 CVE-2018-10883 CVE-2018-1092 CVE-2018-1093 CVE-2018-1094 CVE-2018-1118 CVE-2018-1120 CVE-2018-1130 CVE-2018-12233 CVE-2018-13053 CVE-2018-13405 CVE-2018-13406 CVE-2018-16476 CVE-2018-16871 CVE-2018-3620 CVE-2018-3639 CVE-2018-3646 CVE-2018-5391 CVE-2018-5803 CVE-2018-5848 CVE-2018-7492 CVE-2018-8781 CVE-2018-9385 CVE-2019-12519 CVE-2019-12521 CVE-2019-12528 CVE-2019-12614 CVE-2019-12817 CVE-2019-17498 CVE-2019-18860 CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 CVE-2020-0430 CVE-2020-10704 CVE-2020-11651 CVE-2020-11652 CVE-2020-11945 CVE-2020-11984 CVE-2020-11993 CVE-2020-12268 CVE-2020-12351 CVE-2020-1720 CVE-2020-25645 CVE-2020-25668 CVE-2020-25705 CVE-2020-7069 CVE-2020-7070 CVE-2020-8517 CVE-2020-8694 CVE-2020-9490 SUSE-SU-2018:2092-1 SUSE-SU-2018:2380-1 SUSE-SU-2018:3996-1 SUSE-SU-2019:1744-1 SUSE-SU-2019:1769-1 SUSE-SU-2019:2900-2 SUSE-SU-2020:0143-1 SUSE-SU-2020:0589-1 SUSE-SU-2020:1132-1 SUSE-SU-2020:1151-1 SUSE-SU-2020:1156-1 SUSE-SU-2020:1220-1 SUSE-SU-2020:2344-1 SUSE-SU-2020:2941-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Module for Web Scripting 15 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND haproxy-1.5.4-1 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-22 is installed OR krb5-mini-devel-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libudev-mini-devel-228-149 is installed OR libudev-mini1-228-149 is installed OR systemd-mini-228-149 is installed OR systemd-mini-devel-228-149 is installed OR udev-mini-228-149 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information e2fsprogs-1.42.11-7 is installed OR libcom_err2-1.42.11-7 is installed OR libcom_err2-32bit-1.42.11-7 is installed OR libext2fs2-1.42.11-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information elfutils-0.158-6 is installed OR libasm1-0.158-6 is installed OR libdw1-0.158-6 is installed OR libdw1-32bit-0.158-6 is installed OR libebl1-0.158-6 is installed OR libebl1-32bit-0.158-6 is installed OR libelf1-0.158-6 is installed OR libelf1-32bit-0.158-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR libnm-glib-vpn1-1.0.12-12 is installed OR libnm-glib4-1.0.12-12 is installed OR libnm-util2-1.0.12-12 is installed OR libnm0-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed OR typelib-1_0-NMClient-1_0-1.0.12-12 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND SuSEfirewall2-3.6.312.333-3.13 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND haproxy-1.6.5-5 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information cluster-md-kmp-default-4.12.14-25.3 is installed OR dlm-kmp-default-4.12.14-25.3 is installed OR gfs2-kmp-default-4.12.14-25.3 is installed OR kernel-default-4.12.14-25.3 is installed OR ocfs2-kmp-default-4.12.14-25.3 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information cluster-md-kmp-default-4.12.14-197.7 is installed OR dlm-kmp-default-4.12.14-197.7 is installed OR gfs2-kmp-default-4.12.14-197.7 is installed OR kernel-default-4.12.14-197.7 is installed OR ocfs2-kmp-default-4.12.14-197.7 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND squid-4.11-5.17 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND squid-4.11-5.17 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_120-94_17-default-11-2 is installed OR kgraft-patch-SLE12-SP3_Update_10-11-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP4 is installed AND Package Information kgraft-patch-4_12_14-95_19-default-1-6.3 is installed OR kgraft-patch-SLE12-SP4_Update_5-1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP5 is installed AND kgraft-patch-4_12_14-122_20-default-7-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.8.5-15.9 is installed OR puppet-server-3.8.5-15.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND suse-sles12sp3-image-2.0.2-22 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.20-30 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.20-30 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.20-30 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.20-30 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_47-default-8-2 is installed OR kernel-livepatch-SLE15_Update_17-8-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_4-default-2-2 is installed OR kernel-livepatch-SLE15-SP1_Update_1-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information nodejs6-6.9.5-7 is installed OR nodejs6-devel-6.9.5-7 is installed OR nodejs6-docs-6.9.5-7 is installed OR npm6-6.9.5-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 SP2 is installed AND Package Information apache2-mod_php7-7.4.6-3.11 is installed OR php7-7.4.6-3.11 is installed OR php7-bcmath-7.4.6-3.11 is installed OR php7-bz2-7.4.6-3.11 is installed OR php7-calendar-7.4.6-3.11 is installed OR php7-ctype-7.4.6-3.11 is installed OR php7-curl-7.4.6-3.11 is installed OR php7-dba-7.4.6-3.11 is installed OR php7-devel-7.4.6-3.11 is installed OR php7-dom-7.4.6-3.11 is installed OR php7-enchant-7.4.6-3.11 is installed OR php7-exif-7.4.6-3.11 is installed OR php7-fastcgi-7.4.6-3.11 is installed OR php7-fileinfo-7.4.6-3.11 is installed OR php7-fpm-7.4.6-3.11 is installed OR php7-ftp-7.4.6-3.11 is installed OR php7-gd-7.4.6-3.11 is installed OR php7-gettext-7.4.6-3.11 is installed OR php7-gmp-7.4.6-3.11 is installed OR php7-iconv-7.4.6-3.11 is installed OR php7-intl-7.4.6-3.11 is installed OR php7-json-7.4.6-3.11 is installed OR php7-ldap-7.4.6-3.11 is installed OR php7-mbstring-7.4.6-3.11 is installed OR php7-mysql-7.4.6-3.11 is installed OR php7-odbc-7.4.6-3.11 is installed OR php7-opcache-7.4.6-3.11 is installed OR php7-openssl-7.4.6-3.11 is installed OR php7-pcntl-7.4.6-3.11 is installed OR php7-pdo-7.4.6-3.11 is installed OR php7-pgsql-7.4.6-3.11 is installed OR php7-phar-7.4.6-3.11 is installed OR php7-posix-7.4.6-3.11 is installed OR php7-readline-7.4.6-3.11 is installed OR php7-shmop-7.4.6-3.11 is installed OR php7-snmp-7.4.6-3.11 is installed OR php7-soap-7.4.6-3.11 is installed OR php7-sockets-7.4.6-3.11 is installed OR php7-sodium-7.4.6-3.11 is installed OR php7-sqlite-7.4.6-3.11 is installed OR php7-sysvmsg-7.4.6-3.11 is installed OR php7-sysvsem-7.4.6-3.11 is installed OR php7-sysvshm-7.4.6-3.11 is installed OR php7-tidy-7.4.6-3.11 is installed OR php7-tokenizer-7.4.6-3.11 is installed OR php7-xmlreader-7.4.6-3.11 is installed OR php7-xmlrpc-7.4.6-3.11 is installed OR php7-xmlwriter-7.4.6-3.11 is installed OR php7-xsl-7.4.6-3.11 is installed OR php7-zip-7.4.6-3.11 is installed OR php7-zlib-7.4.6-3.11 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information bzip2-1.0.5-34.253.1 is installed OR bzip2-doc-1.0.5-34.253.1 is installed OR libbz2-1-1.0.5-34.253.1 is installed OR libbz2-1-32bit-1.0.5-34.253.1 is installed OR libbz2-1-x86-1.0.5-34.253.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND gd-2.0.36.RC1-52.20.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache2-mod_perl-2.0.8-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information MozillaFirefox-38.4.0esr-51 is installed OR MozillaFirefox-translations-38.4.0esr-51 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information dbus-1-1.8.16-19 is installed OR dbus-1-x11-1.8.16-19 is installed OR libdbus-1-3-1.8.16-19 is installed OR libdbus-1-3-32bit-1.8.16-19 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information python-doc-2.7.13-28.11 is installed OR python-doc-pdf-2.7.13-28.11 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information python2-salt-2019.2.0-5.67 is installed OR python3-salt-2019.2.0-5.67 is installed OR salt-2019.2.0-5.67 is installed OR salt-api-2019.2.0-5.67 is installed OR salt-bash-completion-2019.2.0-5.67 is installed OR salt-cloud-2019.2.0-5.67 is installed OR salt-doc-2019.2.0-5.67 is installed OR salt-fish-completion-2019.2.0-5.67 is installed OR salt-master-2019.2.0-5.67 is installed OR salt-minion-2019.2.0-5.67 is installed OR salt-proxy-2019.2.0-5.67 is installed OR salt-ssh-2019.2.0-5.67 is installed OR salt-standalone-formulas-configuration-2019.2.0-5.67 is installed OR salt-syndic-2019.2.0-5.67 is installed OR salt-zsh-completion-2019.2.0-5.67 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information apache2-2.4.33-3.30 is installed OR apache2-devel-2.4.33-3.30 is installed OR apache2-doc-2.4.33-3.30 is installed OR apache2-prefork-2.4.33-3.30 is installed OR apache2-utils-2.4.33-3.30 is installed OR apache2-worker-2.4.33-3.30 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information bind-9.9.6P1-0.15.1 is installed OR bind-devel-9.9.6P1-0.15.1 is installed OR bind-devel-32bit-9.9.6P1-0.15.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information dbus-1-devel-1.8.8-1 is installed OR dbus-1-devel-doc-1.8.8-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information libksba-1.3.0-18.1 is installed OR libksba-devel-1.3.0-18.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information ghostscript-9.15-17.2 is installed OR ghostscript-devel-9.15-17.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.22 is installed OR kernel-default-extra-4.12.14-25.22 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information bluez-5.48-5.16 is installed OR bluez-cups-5.48-5.16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information freerdp-2.1.2-15.10 is installed OR freerdp-devel-2.1.2-15.10 is installed OR libfreerdp2-2.1.2-15.10 is installed OR libwinpr2-2.1.2-15.10 is installed OR winpr2-devel-2.1.2-15.10 is installed
BACK