Revision Date: | 2020-12-01 | Version: | 1 |
Title: | Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP2) (Important) |
Description: |
This update for the Linux Kernel 4.4.114-92_67 fixes several issues.
The following security issues were fixed:
- CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations (bsc#1110233). - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host. Depending on how the target's code was built (i.e. depending on a compiler, compile flags and hardware architecture) an attack may lead to a system crash and thus to a denial-of-service or possibly to a non-authorized access to data exported by an iSCSI target. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although we believe it is highly unlikely. (bsc#1107832).
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1017690 1047059 1047095 1062937 1065237 1069213 1077692 1079405 1081294 1090671 1092885 1101644 1101645 1101651 1101656 1101797 1106812 1107832 1110233 1119183 1121816 1121821 1131709 1145604 1150003 1150011 1150250 1151021 1160888 1169740 1171355 1172651 1173334 1174157 943457 960341 969783 983436 CVE-2014-8128 CVE-2015-7554 CVE-2016-10095 CVE-2016-5318 CVE-2017-10788 CVE-2017-10789 CVE-2017-15232 CVE-2017-16232 CVE-2017-18379 CVE-2017-7500 CVE-2017-7501 CVE-2018-10906 CVE-2018-14633 CVE-2018-17182 CVE-2018-2938 CVE-2018-2940 CVE-2018-2952 CVE-2018-2973 CVE-2018-3639 CVE-2018-3639 CVE-2018-7169 CVE-2018-8956 CVE-2019-14822 CVE-2019-14835 CVE-2019-14907 CVE-2019-1547 CVE-2019-1563 CVE-2019-6109 CVE-2019-6111 CVE-2020-11868 CVE-2020-13817 CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-15025 SUSE-SU-2018:0073-1 SUSE-SU-2018:0373-1 SUSE-SU-2018:0662-1 SUSE-SU-2018:1450-1 SUSE-SU-2019:1524-1 SUSE-SU-2019:2413-1 SUSE-SU-2020:0233-1 SUSE-SU-2020:1805-1
|
Platform(s): | openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Legacy Software 15 SUSE Linux Enterprise Module for Legacy Software 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 7
| Product(s): | |
Definition Synopsis |
openSUSE Leap 42.3 is installed AND Package Information
MozillaFirefox-52.2-58 is installed
OR MozillaFirefox-translations-common-52.2-58 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
gimp-2.8.10-1 is installed
OR gimp-lang-2.8.10-1 is installed
OR gimp-plugins-python-2.8.10-1 is installed
OR libgimp-2_0-0-2.8.10-1 is installed
OR libgimpui-2_0-0-2.8.10-1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP1 is installed
AND libaugeas0-1.2.0-3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
colord-1.3.3-10 is installed
OR colord-gtk-lang-0.1.26-6 is installed
OR colord-lang-1.3.3-10 is installed
OR libcolord-gtk1-0.1.26-6 is installed
OR libcolord2-1.3.3-10 is installed
OR libcolord2-32bit-1.3.3-10 is installed
OR libcolorhug2-1.3.3-10 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
cpp48-4.8.5-30 is installed
OR gcc48-4.8.5-30 is installed
OR gcc48-32bit-4.8.5-30 is installed
OR gcc48-c++-4.8.5-30 is installed
OR gcc48-gij-4.8.5-30 is installed
OR gcc48-gij-32bit-4.8.5-30 is installed
OR gcc48-info-4.8.5-30 is installed
OR libasan0-4.8.5-30 is installed
OR libasan0-32bit-4.8.5-30 is installed
OR libgcj48-4.8.5-30 is installed
OR libgcj48-32bit-4.8.5-30 is installed
OR libgcj48-jar-4.8.5-30 is installed
OR libgcj_bc1-4.8.5-30 is installed
OR libstdc++48-devel-4.8.5-30 is installed
OR libstdc++48-devel-32bit-4.8.5-30 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
ghostscript-9.25-23.13 is installed
OR ghostscript-x11-9.25-23.13 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
AND Package Information
python-Flask-0.12.4-3.3 is installed
OR python2-Flask-0.12.4-3.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Basesystem 15 is installed
AND Package Information
libXcursor-devel-1.1.15-1 is installed
OR libXcursor1-1.1.15-1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
AND Package Information
c-ares-devel-1.14.0-1 is installed
OR libcares2-1.14.0-1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Desktop Applications 15 is installed
AND libgnutls30-32bit-3.6.2-4 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
AND Package Information
gstreamer-plugins-bad-1.12.5-3.3 is installed
OR gstreamer-plugins-bad-devel-1.12.5-3.3 is installed
OR gstreamer-plugins-bad-lang-1.12.5-3.3 is installed
OR libgstadaptivedemux-1_0-0-1.12.5-3.3 is installed
OR libgstbadallocators-1_0-0-1.12.5-3.3 is installed
OR libgstbadaudio-1_0-0-1.12.5-3.3 is installed
OR libgstbadbase-1_0-0-1.12.5-3.3 is installed
OR libgstbadvideo-1_0-0-1.12.5-3.3 is installed
OR libgstbasecamerabinsrc-1_0-0-1.12.5-3.3 is installed
OR libgstcodecparsers-1_0-0-1.12.5-3.3 is installed
OR libgstinsertbin-1_0-0-1.12.5-3.3 is installed
OR libgstmpegts-1_0-0-1.12.5-3.3 is installed
OR libgstplayer-1_0-0-1.12.5-3.3 is installed
OR libgsturidownloader-1_0-0-1.12.5-3.3 is installed
OR libgstwayland-1_0-0-1.12.5-3.3 is installed
OR typelib-1_0-GstBadAllocators-1_0-1.12.5-3.3 is installed
OR typelib-1_0-GstGL-1_0-1.12.5-3.3 is installed
OR typelib-1_0-GstInsertBin-1_0-1.12.5-3.3 is installed
OR typelib-1_0-GstMpegts-1_0-1.12.5-3.3 is installed
OR typelib-1_0-GstPlayer-1_0-1.12.5-3.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Development Tools 15 is installed
AND cups-ddk-2.2.7-1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Legacy Software 15 is installed
AND Package Information
kernel-default-4.12.14-25.13 is installed
OR reiserfs-kmp-default-4.12.14-25.13 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Legacy Software 15 SP1 is installed
AND Package Information
openldap2-2.4.46-9.19 is installed
OR openldap2-back-meta-2.4.46-9.19 is installed
OR openldap2-back-perl-2.4.46-9.19 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Live Patching 15 is installed
AND Package Information
kernel-livepatch-4_12_14-150_27-default-6-2 is installed
OR kernel-livepatch-SLE15_Update_12-6-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-livepatch-4_12_14-197_10-default-2-2 is installed
OR kernel-livepatch-SLE15-SP1_Update_3-2-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed
AND Package Information
libwpd-0.10.2-3.3 is installed
OR libwpd-devel-doc-0.10.2-3.3 is installed
OR libwpd-tools-0.10.2-3.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
AND Package Information
libmariadb3-32bit-3.1.2-3.9 is installed
OR mariadb-10.2.25-3.17 is installed
OR mariadb-bench-10.2.25-3.17 is installed
OR mariadb-connector-c-3.1.2-3.9 is installed
OR mariadb-galera-10.2.25-3.17 is installed
OR mariadb-test-10.2.25-3.17 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed
AND Package Information
python-urllib3-1.24-9.4 is installed
OR python2-urllib3-1.24-9.4 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Server Applications 15 is installed
AND Package Information
xen-4.10.1_06-3.3 is installed
OR xen-devel-4.10.1_06-3.3 is installed
OR xen-tools-4.10.1_06-3.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
AND Package Information
libecpg6-10.6-6 is installed
OR postgresql10-contrib-10.6-6 is installed
OR postgresql10-devel-10.6-6 is installed
OR postgresql10-docs-10.6-6 is installed
OR postgresql10-plperl-10.6-6 is installed
OR postgresql10-plpython-10.6-6 is installed
OR postgresql10-pltcl-10.6-6 is installed
OR postgresql10-server-10.6-6 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Module for Web Scripting 15 is installed
AND Package Information
nodejs8-8.15.1-3.17 is installed
OR nodejs8-devel-8.15.1-3.17 is installed
OR nodejs8-docs-8.15.1-3.17 is installed
OR npm8-8.15.1-3.17 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2 is installed
AND ant-1.9.4-1 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
libzypp-16.17.20-27.52 is installed
OR zypper-1.13.45-18.33 is installed
OR zypper-log-1.13.45-18.33 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND
kgraft-patch-4_4_114-92_67-default-8-2 is installed
OR kgraft-patch-SLE12-SP2_Update_19-8-2 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP2-ESPOS is installed
AND
kgraft-patch-4_4_114-92_67-default-8-2 is installed
OR kgraft-patch-SLE12-SP2_Update_19-8-2 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
libwireshark9-2.4.9-48.29 is installed
OR libwiretap7-2.4.9-48.29 is installed
OR libwscodecs1-2.4.9-48.29 is installed
OR libwsutil8-2.4.9-48.29 is installed
OR wireshark-2.4.9-48.29 is installed
OR wireshark-gtk-2.4.9-48.29 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_90-92_45-default-7-2 is installed
OR kgraft-patch-SLE12-SP2_Update_14-7-2 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP3 is installed
AND
libjpeg-turbo-1.5.3-31.7 is installed
OR libjpeg62-62.2.0-31.7 is installed
OR libjpeg62-32bit-62.2.0-31.7 is installed
OR libjpeg62-turbo-1.5.3-31.7 is installed
OR libjpeg8-8.1.2-31.7 is installed
OR libjpeg8-32bit-8.1.2-31.7 is installed
OR libturbojpeg0-8.1.2-31.7 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
AND
libjpeg-turbo-1.5.3-31.7 is installed
OR libjpeg62-62.2.0-31.7 is installed
OR libjpeg62-32bit-62.2.0-31.7 is installed
OR libjpeg62-turbo-1.5.3-31.7 is installed
OR libjpeg8-8.1.2-31.7 is installed
OR libjpeg8-32bit-8.1.2-31.7 is installed
OR libturbojpeg0-8.1.2-31.7 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
libQt5WebKit5-5.6.2-1 is installed
OR libQt5WebKit5-imports-5.6.2-1 is installed
OR libQt5WebKitWidgets5-5.6.2-1 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP3-BCL is installed
AND
libopenssl-devel-1.0.2j-60.55 is installed
OR libopenssl1_0_0-1.0.2j-60.55 is installed
OR libopenssl1_0_0-32bit-1.0.2j-60.55 is installed
OR libopenssl1_0_0-hmac-1.0.2j-60.55 is installed
OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.55 is installed
OR openssl-1.0.2j-60.55 is installed
OR openssl-doc-1.0.2j-60.55 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP3-BCL is installed
AND
libopenssl-devel-1.0.2j-60.55 is installed
OR libopenssl1_0_0-1.0.2j-60.55 is installed
OR libopenssl1_0_0-32bit-1.0.2j-60.55 is installed
OR libopenssl1_0_0-hmac-1.0.2j-60.55 is installed
OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.55 is installed
OR openssl-1.0.2j-60.55 is installed
OR openssl-doc-1.0.2j-60.55 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND
ibus-1.5.13-15.11 is installed
OR ibus-gtk-1.5.13-15.11 is installed
OR ibus-gtk3-1.5.13-15.11 is installed
OR ibus-lang-1.5.13-15.11 is installed
OR libibus-1_0-5-1.5.13-15.11 is installed
OR typelib-1_0-IBus-1_0-1.5.13-15.11 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP3-ESPOS is installed
AND
ibus-1.5.13-15.11 is installed
OR ibus-gtk-1.5.13-15.11 is installed
OR ibus-gtk3-1.5.13-15.11 is installed
OR ibus-lang-1.5.13-15.11 is installed
OR libibus-1_0-5-1.5.13-15.11 is installed
OR typelib-1_0-IBus-1_0-1.5.13-15.11 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND
kgraft-patch-4_4_175-94_79-default-5-2 is installed
OR kgraft-patch-SLE12-SP3_Update_23-5-2 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS is installed
AND
kgraft-patch-4_4_175-94_79-default-5-2 is installed
OR kgraft-patch-SLE12-SP3_Update_23-5-2 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND
java-1_8_0-openjdk-1.8.0.181-27.26 is installed
OR java-1_8_0-openjdk-demo-1.8.0.181-27.26 is installed
OR java-1_8_0-openjdk-devel-1.8.0.181-27.26 is installed
OR java-1_8_0-openjdk-headless-1.8.0.181-27.26 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed
AND
java-1_8_0-openjdk-1.8.0.181-27.26 is installed
OR java-1_8_0-openjdk-demo-1.8.0.181-27.26 is installed
OR java-1_8_0-openjdk-devel-1.8.0.181-27.26 is installed
OR java-1_8_0-openjdk-headless-1.8.0.181-27.26 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
ImageMagick-6.8.8.1-71.74 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-71.74 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-71.74 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP4 is installed
AND
MozillaFirefox-60.3.0-109.50 is installed
OR MozillaFirefox-translations-common-60.3.0-109.50 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
AND
MozillaFirefox-60.3.0-109.50 is installed
OR MozillaFirefox-translations-common-60.3.0-109.50 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP4-ESPOS is installed
AND squid-3.5.21-26.29 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP4-ESPOS is installed
AND squid-3.5.21-26.29 is installed
|
Definition Synopsis |
Release Information
SUSE Linux Enterprise Server 12 SP5 is installed
AND
java-1_7_0-openjdk-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-demo-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-devel-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-headless-1.7.0.241-43.30 is installed
OR Package Information
SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
AND
java-1_7_0-openjdk-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-demo-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-devel-1.7.0.241-43.30 is installed
OR java-1_7_0-openjdk-headless-1.7.0.241-43.30 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND ipmitool-1.8.18-4.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
AND Package Information
flash-player-11.2.202.569-120 is installed
OR flash-player-gnome-11.2.202.569-120 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 SP2 is installed
AND Package Information
libvirt-2.0.0-27.20 is installed
OR libvirt-client-32bit-2.0.0-27.20 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
AND Package Information
libwebkit2gtk3-lang-2.18.5-2.18 is installed
OR webkit2gtk3-2.18.5-2.18 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
kernel-default-4.12.14-25.3 is installed
OR kernel-default-extra-4.12.14-25.3 is installed
|
Definition Synopsis |
SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
Mesa-dri-nouveau-18.3.2-34.9 is installed
OR Mesa-drivers-18.3.2-34.9 is installed
OR libXvMC_nouveau-18.3.2-34.9 is installed
OR libvdpau_nouveau-18.3.2-34.9 is installed
|
Definition Synopsis |
SUSE OpenStack Cloud 7 is installed
AND Package Information
openstack-aodh-3.0.4~a0~dev1-2.3 is installed
OR openstack-aodh-api-3.0.4~a0~dev1-2.3 is installed
OR openstack-aodh-doc-3.0.4~a0~dev1-2.3 is installed
OR openstack-aodh-evaluator-3.0.4~a0~dev1-2.3 is installed
OR openstack-aodh-expirer-3.0.4~a0~dev1-2.3 is installed
OR openstack-aodh-listener-3.0.4~a0~dev1-2.3 is installed
OR openstack-aodh-notifier-3.0.4~a0~dev1-2.3 is installed
OR python-aodh-3.0.4~a0~dev1-2.3 is installed
|