Oval Definition:	oval:org.opensuse.security:def:4475
Revision Date: 2021-08-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 11 for SLE 12 SP5) (Important) Description: This update for the Linux Kernel 4.12.14-122_46 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482). - CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838). - CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215). Family: unix Class: patch Status: Reference(s): 1055014 1055186 1061843 1065729 1077428 1093733 1094301 1101776 1101777 1101786 1101788 1101791 1101794 1101800 1101802 1101804 1101810 1106514 1111647 1117740 1121231 1121232 1121233 1121234 1121235 1127367 1127369 1127370 1129452 1129923 1131941 1131945 1134760 1136021 1141980 1150690 1152489 1156288 1158505 1159913 1161052 1162689 1162691 1163581 1163985 1165241 1165528 1165631 1165710 1167373 1168422 1169365 1169658 1169659 1170313 1171456 1171457 1171458 1173304 1174415 1174628 1174748 1174969 1175052 1175898 1176485 1176569 1176713 1177086 1177353 1177409 1177410 1177411 1177412 1177413 1177414 1177470 1177513 1177729 1177739 1177749 1177750 1177754 1177755 1177765 1177814 1177817 1177854 1177855 1177856 1177861 1178002 1178079 1178246 1183374 1186483 1188323 1188842 957624 CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 CVE-2018-12086 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18225 CVE-2018-18226 CVE-2018-18227 CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-19628 CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10897 CVE-2019-10898 CVE-2019-10899 CVE-2019-10900 CVE-2019-10901 CVE-2019-10902 CVE-2019-10903 CVE-2019-12519 CVE-2019-12521 CVE-2019-12528 CVE-2019-13619 CVE-2019-16319 CVE-2019-18860 CVE-2019-19553 CVE-2019-5108 CVE-2019-5716 CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 CVE-2020-10018 CVE-2020-10957 CVE-2020-10958 CVE-2020-10967 CVE-2020-11793 CVE-2020-11945 CVE-2020-12351 CVE-2020-14059 CVE-2020-14344 CVE-2020-14351 CVE-2020-15900 CVE-2020-16120 CVE-2020-1720 CVE-2020-1749 CVE-2020-25285 CVE-2020-25645 CVE-2020-27670 CVE-2020-27671 CVE-2020-27672 CVE-2020-27673 CVE-2020-3898 CVE-2020-7044 CVE-2020-8517 CVE-2020-9428 CVE-2020-9429 CVE-2020-9430 CVE-2020-9431 CVE-2021-22543 CVE-2021-3426 CVE-2021-3609 CVE-2021-37576 SUSE-SU-2020:0589-1 SUSE-SU-2020:0693-1 SUSE-SU-2020:1083-1 SUSE-SU-2020:1109-1 SUSE-SU-2020:1156-1 SUSE-SU-2020:1177-1 SUSE-SU-2020:1379-1 SUSE-SU-2020:1769-1 SUSE-SU-2020:2095-1 SUSE-SU-2020:2116-1 SUSE-SU-2020:2913-1 SUSE-SU-2020:3122-1 SUSE-SU-2021:1557-1 Platform(s): SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise High Availability 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.51-60.25 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information ghostscript-mini-9.15-17 is installed OR ghostscript-mini-devel-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information krb5-mini-1.12.5-40.13 is installed OR krb5-mini-devel-1.12.5-40.13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information cpp48-4.8.3+r212056-6 is installed OR gcc48-4.8.3+r212056-6 is installed OR gcc48-32bit-4.8.3+r212056-6 is installed OR gcc48-c++-4.8.3+r212056-6 is installed OR gcc48-gij-4.8.3+r212056-6 is installed OR gcc48-gij-32bit-4.8.3+r212056-6 is installed OR gcc48-info-4.8.3+r212056-6 is installed OR libasan0-4.8.3+r212056-6 is installed OR libasan0-32bit-4.8.3+r212056-6 is installed OR libatomic1-4.8.3+r212056-6 is installed OR libatomic1-32bit-4.8.3+r212056-6 is installed OR libffi4-4.8.3+r212056-6 is installed OR libffi4-32bit-4.8.3+r212056-6 is installed OR libgcc_s1-4.8.3+r212056-6 is installed OR libgcc_s1-32bit-4.8.3+r212056-6 is installed OR libgcj48-4.8.3+r212056-6 is installed OR libgcj48-32bit-4.8.3+r212056-6 is installed OR libgcj48-jar-4.8.3+r212056-6 is installed OR libgcj_bc1-4.8.3+r212056-6 is installed OR libgfortran3-4.8.3+r212056-6 is installed OR libgomp1-4.8.3+r212056-6 is installed OR libgomp1-32bit-4.8.3+r212056-6 is installed OR libitm1-4.8.3+r212056-6 is installed OR libitm1-32bit-4.8.3+r212056-6 is installed OR libquadmath0-4.8.3+r212056-6 is installed OR libstdc++48-devel-4.8.3+r212056-6 is installed OR libstdc++48-devel-32bit-4.8.3+r212056-6 is installed OR libstdc++6-4.8.3+r212056-6 is installed OR libstdc++6-32bit-4.8.3+r212056-6 is installed OR libtsan0-4.8.3+r212056-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-9 is installed OR aaa_base-extras-13.2+git20140911.61c1681-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information dia-0.97.3-15 is installed OR dia-lang-0.97.3-15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information ImageMagick-6.8.8.1-70 is installed OR libMagick++-6_Q16-3-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-70 is installed OR libMagickWand-6_Q16-1-6.8.8.1-70 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND autofs-5.0.9-28.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND python3-tools-3.6.13-3.81.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_14-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP2 is installed AND Package Information crmsh-4.2.0+git.1602225426.5f84efb5-5.23 is installed OR crmsh-scripts-4.2.0+git.1602225426.5f84efb5-5.23 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND libjavascriptcoregtk-4_0-18-2.28.1-3.49 is installed OR libwebkit2gtk-4_0-37-2.28.1-3.49 is installed OR libwebkit2gtk3-lang-2.28.1-3.49 is installed OR webkit2gtk-4_0-injected-bundles-2.28.1-3.49 is installed OR webkit2gtk3-2.28.1-3.49 is installed OR webkit2gtk3-devel-2.28.1-3.49 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND libjavascriptcoregtk-4_0-18-2.28.1-3.49 is installed OR libwebkit2gtk-4_0-37-2.28.1-3.49 is installed OR libwebkit2gtk3-lang-2.28.1-3.49 is installed OR webkit2gtk-4_0-injected-bundles-2.28.1-3.49 is installed OR webkit2gtk3-2.28.1-3.49 is installed OR webkit2gtk3-devel-2.28.1-3.49 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP5 is installed AND kgraft-patch-4_12_14-122_46-default-12-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-87 is installed OR libopenssl0_9_8-0.9.8j-87 is installed OR libopenssl0_9_8-32bit-0.9.8j-87 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_56-default-3-2 is installed OR kernel-livepatch-SLE15-SP1_Update_15-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.62-60.64.8 is installed OR kernel-ec2-devel-3.12.62-60.64.8 is installed OR kernel-ec2-extra-3.12.62-60.64.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-30 is installed OR php5-5.5.14-30 is installed OR php5-bcmath-5.5.14-30 is installed OR php5-bz2-5.5.14-30 is installed OR php5-calendar-5.5.14-30 is installed OR php5-ctype-5.5.14-30 is installed OR php5-curl-5.5.14-30 is installed OR php5-dba-5.5.14-30 is installed OR php5-dom-5.5.14-30 is installed OR php5-enchant-5.5.14-30 is installed OR php5-exif-5.5.14-30 is installed OR php5-fastcgi-5.5.14-30 is installed OR php5-fileinfo-5.5.14-30 is installed OR php5-fpm-5.5.14-30 is installed OR php5-ftp-5.5.14-30 is installed OR php5-gd-5.5.14-30 is installed OR php5-gettext-5.5.14-30 is installed OR php5-gmp-5.5.14-30 is installed OR php5-iconv-5.5.14-30 is installed OR php5-intl-5.5.14-30 is installed OR php5-json-5.5.14-30 is installed OR php5-ldap-5.5.14-30 is installed OR php5-mbstring-5.5.14-30 is installed OR php5-mcrypt-5.5.14-30 is installed OR php5-mysql-5.5.14-30 is installed OR php5-odbc-5.5.14-30 is installed OR php5-openssl-5.5.14-30 is installed OR php5-pcntl-5.5.14-30 is installed OR php5-pdo-5.5.14-30 is installed OR php5-pear-5.5.14-30 is installed OR php5-pgsql-5.5.14-30 is installed OR php5-pspell-5.5.14-30 is installed OR php5-shmop-5.5.14-30 is installed OR php5-snmp-5.5.14-30 is installed OR php5-soap-5.5.14-30 is installed OR php5-sockets-5.5.14-30 is installed OR php5-sqlite-5.5.14-30 is installed OR php5-suhosin-5.5.14-30 is installed OR php5-sysvmsg-5.5.14-30 is installed OR php5-sysvsem-5.5.14-30 is installed OR php5-sysvshm-5.5.14-30 is installed OR php5-tokenizer-5.5.14-30 is installed OR php5-wddx-5.5.14-30 is installed OR php5-xmlreader-5.5.14-30 is installed OR php5-xmlrpc-5.5.14-30 is installed OR php5-xmlwriter-5.5.14-30 is installed OR php5-xsl-5.5.14-30 is installed OR php5-zip-5.5.14-30 is installed OR php5-zlib-5.5.14-30 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information xerces-j2-2.8.1-238.27.1 is installed OR xerces-j2-xml-apis-2.8.1-238.27.1 is installed OR xerces-j2-xml-resolver-2.8.1-238.27.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information mono-core-2.6.7-0.13.1 is installed OR mono-data-2.6.7-0.13.1 is installed OR mono-data-postgresql-2.6.7-0.13.1 is installed OR mono-data-sqlite-2.6.7-0.13.1 is installed OR mono-locale-extras-2.6.7-0.13.1 is installed OR mono-nunit-2.6.7-0.13.1 is installed OR mono-web-2.6.7-0.13.1 is installed OR mono-winforms-2.6.7-0.13.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information gvim-7.4.326-2 is installed OR vim-7.4.326-2 is installed OR vim-data-7.4.326-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND apache2-mod_nss-1.0.8-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache2-2.4.23-28 is installed OR apache2-doc-2.4.23-28 is installed OR apache2-example-pages-2.4.23-28 is installed OR apache2-prefork-2.4.23-28 is installed OR apache2-utils-2.4.23-28 is installed OR apache2-worker-2.4.23-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information apache2-2.4.10-14.17.1 is installed OR apache2-doc-2.4.10-14.17.1 is installed OR apache2-example-pages-2.4.10-14.17.1 is installed OR apache2-prefork-2.4.10-14.17.1 is installed OR apache2-utils-2.4.10-14.17.1 is installed OR apache2-worker-2.4.10-14.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND squid-4.11-5.17 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information cvs-1.12.12-181 is installed OR cvs-doc-1.12.12-181 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information cups-2.2.7-3.17 is installed OR cups-client-2.2.7-3.17 is installed OR cups-config-2.2.7-3.17 is installed OR cups-ddk-2.2.7-3.17 is installed OR cups-devel-2.2.7-3.17 is installed OR libcups2-2.2.7-3.17 is installed OR libcups2-32bit-2.2.7-3.17 is installed OR libcupscgi1-2.2.7-3.17 is installed OR libcupsimage2-2.2.7-3.17 is installed OR libcupsmime1-2.2.7-3.17 is installed OR libcupsppdc1-2.2.7-3.17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information kdelibs4-doc-4.3.5-0.12.1 is installed OR libkde4-32bit-4.3.5-0.12.1 is installed OR libkde4-devel-4.3.5-0.12.1 is installed OR libkdecore4-32bit-4.3.5-0.12.1 is installed OR libkdecore4-devel-4.3.5-0.12.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information libssh2-1-1.2.9-4.2.4.1 is installed OR libssh2-1-32bit-1.2.9-4.2.4.1 is installed OR libssh2-1-x86-1.2.9-4.2.4.1 is installed OR libssh2-devel-1.2.9-4.2.4.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information ant-jmf-1.9.4-1 is installed OR ant-scripts-1.9.4-1 is installed OR ant-swing-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information DirectFB-devel-1.7.1-4 is installed OR lib++dfb-devel-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libblkid-devel-2.28-42.1 is installed OR libmount-devel-2.28-42.1 is installed OR libsmartcols-devel-2.28-42.1 is installed OR libuuid-devel-2.28-42.1 is installed OR util-linux-2.28-42.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information flash-player-11.2.202.424-15.1 is installed OR flash-player-gnome-11.2.202.424-15.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information flash-player-11.2.202.635-140.1 is installed OR flash-player-gnome-11.2.202.635-140.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND typelib-1_0-Gtk-2_0-2.24.31-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.19 is installed OR kernel-default-extra-4.12.14-25.19 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information evolution-3.26.6-4.3 is installed OR evolution-devel-3.26.6-4.3 is installed OR evolution-lang-3.26.6-4.3 is installed OR evolution-plugin-bogofilter-3.26.6-4.3 is installed OR evolution-plugin-pst-import-3.26.6-4.3 is installed OR evolution-plugin-spamassassin-3.26.6-4.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information xorg-x11-server-1.20.3-22.5.5 is installed OR xorg-x11-server-wayland-1.20.3-22.5.5 is installed
BACK