Oval Definition:	oval:org.opensuse.security:def:4477
Revision Date: 2021-08-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP5) (Important) Description: This update for the Linux Kernel 4.12.14-122_37 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482). - CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838). - CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215). Family: unix Class: patch Status: Reference(s): 1085469 1118987 1144524 1146848 1150711 1155690 1156202 1159913 1160682 1162197 1162200 1163026 1165631 1166847 1167171 1168404 1168407 1169066 1169851 1170643 1171550 1173027 1173668 1173902 1173994 1174157 1174628 1175557 1177513 1177613 1177729 1177916 1184122 1186483 1188323 1188842 862963 CVE-2018-11805 CVE-2019-13456 CVE-2019-17185 CVE-2019-20372 CVE-2019-5108 CVE-2020-10704 CVE-2020-12351 CVE-2020-13249 CVE-2020-14318 CVE-2020-14323 CVE-2020-14344 CVE-2020-14383 CVE-2020-14556 CVE-2020-14562 CVE-2020-14573 CVE-2020-14577 CVE-2020-14581 CVE-2020-14583 CVE-2020-14593 CVE-2020-14621 CVE-2020-1749 CVE-2020-1927 CVE-2020-1930 CVE-2020-1931 CVE-2020-1934 CVE-2020-1938 CVE-2020-25645 CVE-2020-25654 CVE-2020-3899 CVE-2020-5208 CVE-2020-8177 CVE-2021-22543 CVE-2021-3609 CVE-2021-37576 SUSE-SU-2020:0617-1 SUSE-SU-2020:0813-1 SUSE-SU-2020:1023-1 SUSE-SU-2020:1126-1 SUSE-SU-2020:1132-1 SUSE-SU-2020:1171-1 SUSE-SU-2020:1198-1 SUSE-SU-2020:1423-1 SUSE-SU-2020:1773-1 SUSE-SU-2020:2116-1 SUSE-SU-2020:2143-1 SUSE-SU-2020:3054-1 SUSE-SU-2020:3087-1 SUSE-SU-2021:1598-1 Platform(s): SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise High Availability 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information cups-1.7.5-5 is installed OR cups-ddk-1.7.5-5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-22 is installed OR krb5-mini-devel-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-90 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libudev-mini-devel-228-150.9 is installed OR libudev-mini1-228-150.9 is installed OR systemd-mini-228-150.9 is installed OR systemd-mini-devel-228-150.9 is installed OR udev-mini-228-150.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information cups-1.7.5-2 is installed OR cups-client-1.7.5-2 is installed OR cups-libs-1.7.5-2 is installed OR cups-libs-32bit-1.7.5-2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND dosfstools-3.0.26-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR libnm-glib-vpn1-1.0.12-12 is installed OR libnm-glib4-1.0.12-12 is installed OR libnm-util2-1.0.12-12 is installed OR libnm0-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed OR typelib-1_0-NMClient-1_0-1.0.12-12 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information bash-4.3-83.15 is installed OR bash-doc-4.3-83.15 is installed OR bash-lang-4.3-83.15 is installed OR libreadline6-6.3-83.15 is installed OR libreadline6-32bit-6.3-83.15 is installed OR readline-doc-6.3-83.15 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND dtc-1.5.1-4.3.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_55-52_42-default-2-2.2 is installed OR kgraft-patch-3_12_55-52_42-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_12-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise High Availability 15 SP2 is installed AND Package Information libpacemaker-devel-2.0.4+20200616.2deceaa3a-3.3 is installed OR libpacemaker3-2.0.4+20200616.2deceaa3a-3.3 is installed OR pacemaker-2.0.4+20200616.2deceaa3a-3.3 is installed OR pacemaker-cli-2.0.4+20200616.2deceaa3a-3.3 is installed OR pacemaker-cts-2.0.4+20200616.2deceaa3a-3.3 is installed OR pacemaker-remote-2.0.4+20200616.2deceaa3a-3.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND freeradius-server-3.0.16-3.6 is installed OR freeradius-server-devel-3.0.16-3.6 is installed OR freeradius-server-krb5-3.0.16-3.6 is installed OR freeradius-server-ldap-3.0.16-3.6 is installed OR freeradius-server-libs-3.0.16-3.6 is installed OR freeradius-server-mysql-3.0.16-3.6 is installed OR freeradius-server-perl-3.0.16-3.6 is installed OR freeradius-server-postgresql-3.0.16-3.6 is installed OR freeradius-server-python-3.0.16-3.6 is installed OR freeradius-server-sqlite-3.0.16-3.6 is installed OR freeradius-server-utils-3.0.16-3.6 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND freeradius-server-3.0.16-3.6 is installed OR freeradius-server-devel-3.0.16-3.6 is installed OR freeradius-server-krb5-3.0.16-3.6 is installed OR freeradius-server-ldap-3.0.16-3.6 is installed OR freeradius-server-libs-3.0.16-3.6 is installed OR freeradius-server-mysql-3.0.16-3.6 is installed OR freeradius-server-perl-3.0.16-3.6 is installed OR freeradius-server-postgresql-3.0.16-3.6 is installed OR freeradius-server-python-3.0.16-3.6 is installed OR freeradius-server-sqlite-3.0.16-3.6 is installed OR freeradius-server-utils-3.0.16-3.6 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP5 is installed AND kgraft-patch-4_12_14-122_37-default-15-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-73 is installed OR libopenssl0_9_8-0.9.8j-73 is installed OR libopenssl0_9_8-32bit-0.9.8j-73 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_48-default-4-2 is installed OR kernel-livepatch-SLE15-SP1_Update_13-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.67-60.64.18 is installed OR kernel-ec2-devel-3.12.67-60.64.18 is installed OR kernel-ec2-extra-3.12.67-60.64.18 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-36 is installed OR php5-5.5.14-36 is installed OR php5-bcmath-5.5.14-36 is installed OR php5-bz2-5.5.14-36 is installed OR php5-calendar-5.5.14-36 is installed OR php5-ctype-5.5.14-36 is installed OR php5-curl-5.5.14-36 is installed OR php5-dba-5.5.14-36 is installed OR php5-dom-5.5.14-36 is installed OR php5-enchant-5.5.14-36 is installed OR php5-exif-5.5.14-36 is installed OR php5-fastcgi-5.5.14-36 is installed OR php5-fileinfo-5.5.14-36 is installed OR php5-fpm-5.5.14-36 is installed OR php5-ftp-5.5.14-36 is installed OR php5-gd-5.5.14-36 is installed OR php5-gettext-5.5.14-36 is installed OR php5-gmp-5.5.14-36 is installed OR php5-iconv-5.5.14-36 is installed OR php5-intl-5.5.14-36 is installed OR php5-json-5.5.14-36 is installed OR php5-ldap-5.5.14-36 is installed OR php5-mbstring-5.5.14-36 is installed OR php5-mcrypt-5.5.14-36 is installed OR php5-mysql-5.5.14-36 is installed OR php5-odbc-5.5.14-36 is installed OR php5-opcache-5.5.14-36 is installed OR php5-openssl-5.5.14-36 is installed OR php5-pcntl-5.5.14-36 is installed OR php5-pdo-5.5.14-36 is installed OR php5-pear-5.5.14-36 is installed OR php5-pgsql-5.5.14-36 is installed OR php5-posix-5.5.14-36 is installed OR php5-pspell-5.5.14-36 is installed OR php5-shmop-5.5.14-36 is installed OR php5-snmp-5.5.14-36 is installed OR php5-soap-5.5.14-36 is installed OR php5-sockets-5.5.14-36 is installed OR php5-sqlite-5.5.14-36 is installed OR php5-suhosin-5.5.14-36 is installed OR php5-sysvmsg-5.5.14-36 is installed OR php5-sysvsem-5.5.14-36 is installed OR php5-sysvshm-5.5.14-36 is installed OR php5-tokenizer-5.5.14-36 is installed OR php5-wddx-5.5.14-36 is installed OR php5-xmlreader-5.5.14-36 is installed OR php5-xmlrpc-5.5.14-36 is installed OR php5-xmlwriter-5.5.14-36 is installed OR php5-xsl-5.5.14-36 is installed OR php5-zip-5.5.14-36 is installed OR php5-zlib-5.5.14-36 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND yast2-ldap-server-2.17.21-0.1.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information mozilla-xulrunner192-1.9.2.27-0.2.1 is installed OR mozilla-xulrunner192-32bit-1.9.2.27-0.2.1 is installed OR mozilla-xulrunner192-gnome-1.9.2.27-0.2.1 is installed OR mozilla-xulrunner192-translations-1.9.2.27-0.2.1 is installed OR mozilla-xulrunner192-x86-1.9.2.27-0.2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND hardlink-1.0-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information augeas-1.2.0-3 is installed OR augeas-lenses-1.2.0-3 is installed OR libaugeas0-1.2.0-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information libmysqlclient-devel-10.0.26-20.10.2 is installed OR libmysqlclient18-10.0.26-20.10.2 is installed OR libmysqlclient18-32bit-10.0.26-20.10.2 is installed OR libmysqlclient_r18-10.0.26-20.10.2 is installed OR libmysqld-devel-10.0.26-20.10.2 is installed OR libmysqld18-10.0.26-20.10.2 is installed OR mariadb-10.0.26-20.10.2 is installed OR mariadb-client-10.0.26-20.10.2 is installed OR mariadb-errormessages-10.0.26-20.10.2 is installed OR mariadb-tools-10.0.26-20.10.2 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND nginx-1.16.1-3.12 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND davfs2-1.5.2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information apache2-2.4.33-3.30 is installed OR apache2-devel-2.4.33-3.30 is installed OR apache2-doc-2.4.33-3.30 is installed OR apache2-prefork-2.4.33-3.30 is installed OR apache2-utils-2.4.33-3.30 is installed OR apache2-worker-2.4.33-3.30 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information liblcms-devel-1.17-77.16.1 is installed OR liblcms-devel-32bit-1.17-77.16.1 is installed OR python-lcms-1.17-77.16.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information libtiff-devel-3.8.2-141.154.1 is installed OR libtiff-devel-32bit-3.8.2-141.154.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND augeas-devel-1.2.0-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR ImageMagick-devel-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagick++-devel-6.8.8.1-8 is installed OR perl-PerlMagick-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libgit2-0.24.1-3.1 is installed OR libgit2-24-0.24.1-3.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND icu-52.1-7.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information flash-player-11.2.202.554-114.1 is installed OR flash-player-gnome-11.2.202.554-114.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-52.9.1-3.7 is installed OR MozillaThunderbird-devel-52.9.1-3.7 is installed OR MozillaThunderbird-translations-common-52.9.1-3.7 is installed OR MozillaThunderbird-translations-other-52.9.1-3.7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information bluez-5.48-5.16 is installed OR bluez-cups-5.48-5.16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information MozillaThunderbird-68.12.0-3.94 is installed OR MozillaThunderbird-translations-common-68.12.0-3.94 is installed OR MozillaThunderbird-translations-other-68.12.0-3.94 is installed
BACK