Oval Definition:	oval:org.opensuse.security:def:4409
Revision Date: 2021-05-25 Version: 1 Title: Security update for the Linux Kernel (Live Patch 17 for SLE 12 SP5) (Important) Description: This update for the Linux Kernel 4.12.14-122_66 fixes several issues. The following security issues were fixed: - CVE-2020-36322: Fixed an issue inside the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, could have caused a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952). - CVE-2021-3444: Fixed incorrect mod32 BPF verifier truncation (bsc#1184171). - CVE-2021-3444: Fixed incorrect mod32 BPF verifier truncation (bsc#1184171). Family: unix Class: patch Status: Reference(s): 1051510 1058115 1065600 1065729 1071995 1083548 1085030 1104967 1111666 1112178 1113956 1120163 1120999 1125601 1130245 1133021 1134452 1134697 1136666 1137815 1144333 1148873 1150164 1152107 1152148 1153108 1157770 1158755 1159819 1161913 1162002 1163524 1163581 1164692 1164825 1164860 1165629 1166965 1167939 1169746 1169790 1170011 1170232 1171078 1171252 1171254 1171558 1171673 1171688 1171732 1171868 1171978 1171988 1172073 1172108 1172177 1172247 1172257 1172418 1172428 1172775 1172781 1172782 1172783 1172798 1172871 1172872 1172873 1172963 1172999 1173060 1173265 1173274 1173280 1173485 1173514 1173567 1173573 1173659 1173798 1173954 1173999 1174000 1174003 1174026 1174070 1174115 1174117 1174121 1174205 1174387 1174462 1174484 1174543 1174547 1174549 1174550 1174625 1174633 1174635 1174638 1174658 1174685 1174689 1174699 1174734 1174757 1174771 1174840 1174841 1174843 1174844 1174845 1174852 1174873 1174904 1174926 1174968 1175062 1175063 1175064 1175065 1175066 1175067 1175112 1175127 1175128 1175149 1175199 1175213 1175228 1175232 1175284 1175393 1175394 1175396 1175397 1175398 1175399 1175400 1175401 1175402 1175403 1175404 1175405 1175406 1175407 1175408 1175409 1175410 1175411 1175412 1175413 1175414 1175415 1175416 1175417 1175418 1175419 1175420 1175421 1175422 1175423 1175440 1175493 1175515 1175518 1175526 1175550 1175568 1175654 1175666 1175667 1175668 1175669 1175670 1175691 1175767 1175768 1175769 1175770 1175771 1175772 1175786 1175873 1176069 1176441 1176569 1178577 1178614 1178624 1178675 1184171 1184952 CVE-2019-10220 CVE-2019-12435 CVE-2019-16746 CVE-2019-16746 CVE-2019-17006 CVE-2019-17569 CVE-2019-20908 CVE-2019-20908 CVE-2020-0305 CVE-2020-0305 CVE-2020-10135 CVE-2020-10766 CVE-2020-10766 CVE-2020-10767 CVE-2020-10767 CVE-2020-10768 CVE-2020-10768 CVE-2020-10769 CVE-2020-10769 CVE-2020-10773 CVE-2020-10773 CVE-2020-12399 CVE-2020-12653 CVE-2020-12654 CVE-2020-12771 CVE-2020-12771 CVE-2020-12888 CVE-2020-12888 CVE-2020-13844 CVE-2020-13934 CVE-2020-13935 CVE-2020-13974 CVE-2020-13974 CVE-2020-14314 CVE-2020-14331 CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 CVE-2020-14356 CVE-2020-14386 CVE-2020-14416 CVE-2020-14416 CVE-2020-14422 CVE-2020-15393 CVE-2020-15393 CVE-2020-15780 CVE-2020-15780 CVE-2020-16166 CVE-2020-1749 CVE-2020-1935 CVE-2020-1938 CVE-2020-24394 CVE-2020-36322 CVE-2020-8027 CVE-2020-8164 CVE-2021-3444 SUSE-SU-2019:1574-1 SUSE-SU-2020:0598-1 SUSE-SU-2020:1677-1 SUSE-SU-2020:1920-1 SUSE-SU-2020:2045-1 SUSE-SU-2020:2326-1 SUSE-SU-2020:2575-1 SUSE-SU-2020:2577-1 SUSE-SU-2020:2710-1 SUSE-SU-2020:2712-2 SUSE-SU-2020:2939-1 SUSE-SU-2020:3749-1 SUSE-SU-2021:1733-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise High Availability 15 SUSE Linux Enterprise High Availability 15 SP1 SUSE Linux Enterprise High Availability 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Manager Proxy 4.0 SUSE Manager Server 4.0 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND python-pymongo-2.6.3-2 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.32-33 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.59-60.41 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.74-92.29 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.82-6.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information dhcp-4.2.6-7 is installed OR dhcp-client-4.2.6-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information java-1_8_0-openjdk-1.8.0.101-14 is installed OR java-1_8_0-openjdk-headless-1.8.0.101-14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information MozillaFirefox-52.2.0esr-108 is installed OR MozillaFirefox-translations-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information coreutils-8.25-13.7 is installed OR coreutils-lang-8.25-13.7 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND Package Information cross-nvptx-gcc7-7.5.0+r278197-4.19.2 is installed OR cross-nvptx-newlib7-devel-7.5.0+r278197-4.19.2 is installed OR gcc7-32bit-7.5.0+r278197-4.19.2 is installed OR gcc7-ada-7.5.0+r278197-4.19.2 is installed OR gcc7-c++-32bit-7.5.0+r278197-4.19.2 is installed OR gcc7-fortran-32bit-7.5.0+r278197-4.19.2 is installed OR gcc7-info-7.5.0+r278197-4.19.2 is installed OR gcc7-locale-7.5.0+r278197-4.19.2 is installed OR gcc7-objc-7.5.0+r278197-4.19.2 is installed OR libada7-7.5.0+r278197-4.19.2 is installed OR libasan4-32bit-7.5.0+r278197-4.19.2 is installed OR libcilkrts5-32bit-7.5.0+r278197-4.19.2 is installed OR libstdc++6-devel-gcc7-32bit-7.5.0+r278197-4.19.2 is installed OR libubsan0-32bit-7.5.0+r278197-4.19.2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 is installed AND Package Information cluster-md-kmp-default-4.12.14-150.55 is installed OR dlm-kmp-default-4.12.14-150.55 is installed OR gfs2-kmp-default-4.12.14-150.55 is installed OR kernel-default-4.12.14-150.55 is installed OR ocfs2-kmp-default-4.12.14-150.55 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP1 is installed AND Package Information ctdb-4.9.5+git.176.375e1f05788-3.6 is installed OR samba-4.9.5+git.176.375e1f05788-3.6 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP2 is installed AND Package Information cluster-md-kmp-default-5.3.18-24.15 is installed OR dlm-kmp-default-5.3.18-24.15 is installed OR gfs2-kmp-default-5.3.18-24.15 is installed OR kernel-default-5.3.18-24.15 is installed OR ocfs2-kmp-default-5.3.18-24.15 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND tomcat-9.0.36-3.65 is installed OR tomcat-admin-webapps-9.0.36-3.65 is installed OR tomcat-el-3_0-api-9.0.36-3.65 is installed OR tomcat-jsp-2_3-api-9.0.36-3.65 is installed OR tomcat-lib-9.0.36-3.65 is installed OR tomcat-servlet-4_0-api-9.0.36-3.65 is installed OR tomcat-webapps-9.0.36-3.65 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND tomcat-9.0.36-3.65 is installed OR tomcat-admin-webapps-9.0.36-3.65 is installed OR tomcat-el-3_0-api-9.0.36-3.65 is installed OR tomcat-jsp-2_3-api-9.0.36-3.65 is installed OR tomcat-lib-9.0.36-3.65 is installed OR tomcat-servlet-4_0-api-9.0.36-3.65 is installed OR tomcat-webapps-9.0.36-3.65 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP4 is installed AND Package Information kgraft-patch-4_12_14-95_37-default-1-6.5 is installed OR kgraft-patch-SLE12-SP4_Update_9-1-6.5 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP5 is installed AND kgraft-patch-4_12_14-122_66-default-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND python-setuptools-18.0.1-4.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-78 is installed OR libopenssl0_9_8-0.9.8j-78 is installed OR libopenssl0_9_8-32bit-0.9.8j-78 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_21-default-3-2 is installed OR kernel-livepatch-SLE15-SP1_Update_6-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.39-47 is installed OR kernel-ec2-devel-3.12.39-47 is installed OR kernel-ec2-extra-3.12.39-47 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information nodejs6-6.9.5-7 is installed OR nodejs6-devel-6.9.5-7 is installed OR nodejs6-docs-6.9.5-7 is installed OR npm6-6.9.5-7 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information ext4dev-kmp-default-0_2.6.27.23_0.1-7.1.7 is installed OR ext4dev-kmp-pae-0_2.6.27.23_0.1-7.1.7 is installed OR ext4dev-kmp-ppc64-0_2.6.27.23_0.1-7.1.7 is installed OR ext4dev-kmp-vmi-0_2.6.27.23_0.1-7.1.7 is installed OR ext4dev-kmp-xen-0_2.6.27.23_0.1-7.1.7 is installed OR iscsitarget-kmp-default-0.4.15_2.6.27.54_0.2-94.14.8 is installed OR kernel-default-2.6.27.23-0.1.1 is installed OR kernel-default-base-2.6.27.23-0.1.1 is installed OR kernel-default-man-2.6.27.23-0.1.1 is installed OR kernel-kdump-2.6.27.23-0.1.1 is installed OR kernel-pae-2.6.27.23-0.1.1 is installed OR kernel-pae-base-2.6.27.23-0.1.1 is installed OR kernel-ppc64-2.6.27.23-0.1.1 is installed OR kernel-ppc64-base-2.6.27.23-0.1.1 is installed OR kernel-source-2.6.27.23-0.1.1 is installed OR kernel-syms-2.6.27.23-0.1.1 is installed OR kernel-vmi-2.6.27.23-0.1.1 is installed OR kernel-vmi-base-2.6.27.23-0.1.1 is installed OR kernel-xen-2.6.27.23-0.1.1 is installed OR kernel-xen-base-2.6.27.23-0.1.1 is installed OR oracleasm-kmp-default-2.0.5_2.6.27.54_0.2-7.9.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND libarchive2-2.5.5-5.19 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information accountsservice-0.6.35-1 is installed OR accountsservice-lang-0.6.35-1 is installed OR libaccountsservice0-0.6.35-1 is installed OR typelib-1_0-AccountsService-1_0-0.6.35-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-9 is installed OR aaa_base-extras-13.2+git20140911.61c1681-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information bind-9.9.9P1-62 is installed OR bind-chrootenv-9.9.9P1-62 is installed OR bind-doc-9.9.9P1-62 is installed OR bind-libs-9.9.9P1-62 is installed OR bind-libs-32bit-9.9.9P1-62 is installed OR bind-utils-9.9.9P1-62 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information unixODBC-2.3.6-7.9 is installed OR unixODBC-32bit-2.3.6-7.9 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information libfreebl3-3.53-3.40 is installed OR libfreebl3-32bit-3.53-3.40 is installed OR libfreebl3-hmac-3.53-3.40 is installed OR libfreebl3-hmac-32bit-3.53-3.40 is installed OR libsoftokn3-3.53-3.40 is installed OR libsoftokn3-32bit-3.53-3.40 is installed OR libsoftokn3-hmac-3.53-3.40 is installed OR libsoftokn3-hmac-32bit-3.53-3.40 is installed OR mozilla-nspr-4.25-3.12 is installed OR mozilla-nspr-32bit-4.25-3.12 is installed OR mozilla-nspr-devel-4.25-3.12 is installed OR mozilla-nss-3.53-3.40 is installed OR mozilla-nss-32bit-3.53-3.40 is installed OR mozilla-nss-certs-3.53-3.40 is installed OR mozilla-nss-certs-32bit-3.53-3.40 is installed OR mozilla-nss-devel-3.53-3.40 is installed OR mozilla-nss-sysinit-3.53-3.40 is installed OR mozilla-nss-tools-3.53-3.40 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information cups-2.2.7-3.17 is installed OR cups-client-2.2.7-3.17 is installed OR cups-config-2.2.7-3.17 is installed OR cups-ddk-2.2.7-3.17 is installed OR cups-devel-2.2.7-3.17 is installed OR libcups2-2.2.7-3.17 is installed OR libcups2-32bit-2.2.7-3.17 is installed OR libcupscgi1-2.2.7-3.17 is installed OR libcupsimage2-2.2.7-3.17 is installed OR libcupsmime1-2.2.7-3.17 is installed OR libcupsppdc1-2.2.7-3.17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information git-1.7.12.4-0.11.2 is installed OR git-arch-1.7.12.4-0.11.2 is installed OR git-core-1.7.12.4-0.11.2 is installed OR git-cvs-1.7.12.4-0.11.2 is installed OR git-daemon-1.7.12.4-0.11.2 is installed OR git-email-1.7.12.4-0.11.2 is installed OR git-gui-1.7.12.4-0.11.2 is installed OR git-svn-1.7.12.4-0.11.2 is installed OR git-web-1.7.12.4-0.11.2 is installed OR gitk-1.7.12.4-0.11.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND aaa_base-malloccheck-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information xfsprogs-3.2.1-3.5 is installed OR xfsprogs-devel-3.2.1-3.5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libcares-devel-1.9.1-5.1 is installed OR libcares2-1.9.1-5.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information ImageMagick-6.8.8.1-8.2 is installed OR libMagick++-6_Q16-3-6.8.8.1-8.2 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information pulseaudio-module-bluetooth-5.0-2 is installed OR pulseaudio-module-gconf-5.0-2 is installed OR pulseaudio-module-jack-5.0-2 is installed OR pulseaudio-module-lirc-5.0-2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND bash-lang-4.3-82 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND enigmail-2.0.7-3.7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.8.0-3.46 is installed OR MozillaThunderbird-translations-common-60.8.0-3.46 is installed OR MozillaThunderbird-translations-other-60.8.0-3.46 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information MozillaThunderbird-68.10.0-3.88 is installed OR MozillaThunderbird-translations-common-68.10.0-3.88 is installed OR MozillaThunderbird-translations-other-68.10.0-3.88 is installed
BACK