Oval Definition:	oval:org.opensuse.security:def:4491
Revision Date: 2021-09-16 Version: 1 Title: Security update for the Linux Kernel (Live Patch 21 for SLE 12 SP5) (Important) Description: This update for the Linux Kernel 4.12.14-122_80 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1085469 1129452 1133719 1136020 1137137 1138734 1145586 1149100 1159913 1160611 1160612 1160613 1160614 1160615 1160922 1160968 1162296 1163026 1164903 1165548 1165631 1168554 1168683 1169365 1169511 1170595 1171352 1171477 1171928 1172004 1172225 1172277 1173160 1174910 1174913 1176072 1176382 1181145 1181146 1189278 1189418 1189420 CVE-2019-18904 CVE-2019-20807 CVE-2019-2126 CVE-2019-2949 CVE-2019-5108 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 CVE-2020-10703 CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 CVE-2020-10745 CVE-2020-11651 CVE-2020-11652 CVE-2020-12693 CVE-2020-14361 CVE-2020-14362 CVE-2020-14386 CVE-2020-1749 CVE-2020-25212 CVE-2020-2654 CVE-2020-2754 CVE-2020-2755 CVE-2020-2756 CVE-2020-2757 CVE-2020-2781 CVE-2020-2800 CVE-2020-2803 CVE-2020-2805 CVE-2020-2830 CVE-2020-5208 CVE-2020-9484 CVE-2021-3114 CVE-2021-3115 CVE-2021-3653 CVE-2021-3656 CVE-2021-38198 SUSE-SU-2020:0143-1 SUSE-SU-2020:0617-1 SUSE-SU-2020:1151-1 SUSE-SU-2020:1177-1 SUSE-SU-2020:1179-1 SUSE-SU-2020:1250-1 SUSE-SU-2020:1334-1 SUSE-SU-2020:1364-1 SUSE-SU-2020:1551-1 SUSE-SU-2020:1684-1 SUSE-SU-2020:2065-1 SUSE-SU-2020:2398-1 SUSE-SU-2020:2599-1 SUSE-SU-2021:0222-1 Platform(s): SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND Package Information ruby2.1-rubygem-chef-10.32.2-3 is installed OR rubygem-chef-10.32.2-3 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information cups-1.7.5-5 is installed OR cups-ddk-1.7.5-5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-22 is installed OR krb5-mini-devel-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-84 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.82-6.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information empathy-3.10.3-1 is installed OR empathy-lang-3.10.3-1 is installed OR telepathy-mission-control-plugin-goa-3.10.3-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information bzip2-1.0.6-27 is installed OR libbz2-1-1.0.6-27 is installed OR libbz2-1-32bit-1.0.6-27 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information fontconfig-2.11.1-7 is installed OR fontconfig-32bit-2.11.1-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR libnm-glib-vpn1-1.0.12-12 is installed OR libnm-glib4-1.0.12-12 is installed OR libnm-util2-1.0.12-12 is installed OR libnm0-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed OR typelib-1_0-NMClient-1_0-1.0.12-12 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND Package Information go1.14-1.14.14-1.32.1 is installed OR go1.14-doc-1.14.14-1.32.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_55-52_42-default-2-2.2 is installed OR kgraft-patch-3_12_55-52_42-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_12-2-2.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND rmt-server-2.5.7-3.31 is installed OR rmt-server-config-2.5.7-3.31 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND rmt-server-2.5.7-3.31 is installed OR rmt-server-config-2.5.7-3.31 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP5 is installed AND kgraft-patch-4_12_14-122_80-default-3-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information compat-openssl098-0.9.8j-94 is installed OR libopenssl0_9_8-0.9.8j-94 is installed OR libopenssl0_9_8-32bit-0.9.8j-94 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_15-default-6-2 is installed OR kernel-livepatch-SLE15-SP1_Update_4-6-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND Package Information kernel-livepatch-5_3_18-24_9-default-3-2 is installed OR kernel-livepatch-SLE15-SP2_Update_1-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.61-52.83 is installed OR kernel-ec2-devel-3.12.61-52.83 is installed OR kernel-ec2-extra-3.12.61-52.83 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-53 is installed OR php5-5.5.14-53 is installed OR php5-bcmath-5.5.14-53 is installed OR php5-bz2-5.5.14-53 is installed OR php5-calendar-5.5.14-53 is installed OR php5-ctype-5.5.14-53 is installed OR php5-curl-5.5.14-53 is installed OR php5-dba-5.5.14-53 is installed OR php5-dom-5.5.14-53 is installed OR php5-enchant-5.5.14-53 is installed OR php5-exif-5.5.14-53 is installed OR php5-fastcgi-5.5.14-53 is installed OR php5-fileinfo-5.5.14-53 is installed OR php5-fpm-5.5.14-53 is installed OR php5-ftp-5.5.14-53 is installed OR php5-gd-5.5.14-53 is installed OR php5-gettext-5.5.14-53 is installed OR php5-gmp-5.5.14-53 is installed OR php5-iconv-5.5.14-53 is installed OR php5-intl-5.5.14-53 is installed OR php5-json-5.5.14-53 is installed OR php5-ldap-5.5.14-53 is installed OR php5-mbstring-5.5.14-53 is installed OR php5-mcrypt-5.5.14-53 is installed OR php5-mysql-5.5.14-53 is installed OR php5-odbc-5.5.14-53 is installed OR php5-opcache-5.5.14-53 is installed OR php5-openssl-5.5.14-53 is installed OR php5-pcntl-5.5.14-53 is installed OR php5-pdo-5.5.14-53 is installed OR php5-pear-5.5.14-53 is installed OR php5-pgsql-5.5.14-53 is installed OR php5-posix-5.5.14-53 is installed OR php5-pspell-5.5.14-53 is installed OR php5-shmop-5.5.14-53 is installed OR php5-snmp-5.5.14-53 is installed OR php5-soap-5.5.14-53 is installed OR php5-sockets-5.5.14-53 is installed OR php5-sqlite-5.5.14-53 is installed OR php5-suhosin-5.5.14-53 is installed OR php5-sysvmsg-5.5.14-53 is installed OR php5-sysvsem-5.5.14-53 is installed OR php5-sysvshm-5.5.14-53 is installed OR php5-tokenizer-5.5.14-53 is installed OR php5-wddx-5.5.14-53 is installed OR php5-xmlreader-5.5.14-53 is installed OR php5-xmlrpc-5.5.14-53 is installed OR php5-xmlwriter-5.5.14-53 is installed OR php5-xsl-5.5.14-53 is installed OR php5-zip-5.5.14-53 is installed OR php5-zlib-5.5.14-53 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information curl-7.19.7-1.20.27.9 is installed OR libcurl4-7.19.7-1.20.27.9 is installed OR libcurl4-32bit-7.19.7-1.20.27.9 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information pam_krb5-2.3.1-47.12.1 is installed OR pam_krb5-32bit-2.3.1-47.12.1 is installed OR pam_krb5-x86-2.3.1-47.12.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information libX11-6-1.6.2-4 is installed OR libX11-6-32bit-1.6.2-4 is installed OR libX11-data-1.6.2-4 is installed OR libX11-xcb1-1.6.2-4 is installed OR libX11-xcb1-32bit-1.6.2-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cpio-2.11-29 is installed OR cpio-lang-2.11-29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_48-52_27-default-5-2.2 is installed OR kgraft-patch-3_12_48-52_27-xen-5-2.2 is installed OR kgraft-patch-SLE12_Update_8-5-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND Package Information python2-salt-2019.2.0-5.67 is installed OR python3-salt-2019.2.0-5.67 is installed OR salt-2019.2.0-5.67 is installed OR salt-api-2019.2.0-5.67 is installed OR salt-bash-completion-2019.2.0-5.67 is installed OR salt-cloud-2019.2.0-5.67 is installed OR salt-doc-2019.2.0-5.67 is installed OR salt-fish-completion-2019.2.0-5.67 is installed OR salt-master-2019.2.0-5.67 is installed OR salt-minion-2019.2.0-5.67 is installed OR salt-proxy-2019.2.0-5.67 is installed OR salt-ssh-2019.2.0-5.67 is installed OR salt-standalone-formulas-configuration-2019.2.0-5.67 is installed OR salt-syndic-2019.2.0-5.67 is installed OR salt-zsh-completion-2019.2.0-5.67 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information evince-3.20.1-5 is installed OR evince-browser-plugin-3.20.1-5 is installed OR evince-lang-3.20.1-5 is installed OR evince-plugin-djvudocument-3.20.1-5 is installed OR evince-plugin-dvidocument-3.20.1-5 is installed OR evince-plugin-pdfdocument-3.20.1-5 is installed OR evince-plugin-psdocument-3.20.1-5 is installed OR evince-plugin-tiffdocument-3.20.1-5 is installed OR evince-plugin-xpsdocument-3.20.1-5 is installed OR libevdocument3-4-3.20.1-5 is installed OR libevview3-3-3.20.1-5 is installed OR nautilus-evince-3.20.1-5 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information rpmlint-1.10-7.12 is installed OR rpmlint-mini-1.10-5.12 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND libssh2-0.2-5.18.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information bytefx-data-mysql-2.6.7-0.16.1 is installed OR mono-core-2.6.7-0.16.1 is installed OR mono-data-2.6.7-0.16.1 is installed OR mono-data-firebird-2.6.7-0.16.1 is installed OR mono-data-oracle-2.6.7-0.16.1 is installed OR mono-data-postgresql-2.6.7-0.16.1 is installed OR mono-data-sqlite-2.6.7-0.16.1 is installed OR mono-data-sybase-2.6.7-0.16.1 is installed OR mono-devel-2.6.7-0.16.1 is installed OR mono-extras-2.6.7-0.16.1 is installed OR mono-jscript-2.6.7-0.16.1 is installed OR mono-locale-extras-2.6.7-0.16.1 is installed OR mono-nunit-2.6.7-0.16.1 is installed OR mono-wcf-2.6.7-0.16.1 is installed OR mono-web-2.6.7-0.16.1 is installed OR mono-winforms-2.6.7-0.16.1 is installed OR mono-winfxcore-2.6.7-0.16.1 is installed OR monodoc-core-2.6.7-0.16.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND MozillaFirefox-devel-31.1.0esr-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information FastCGI-2.4.0-167 is installed OR perl-FastCGI-2.4.0-167 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libtcnative-1-0-1.1.34-12.1 is installed OR libtcnative-1-0-devel-1.1.34-12.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information libssh-0.6.3-4.1 is installed OR libssh4-0.6.3-4.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information gd-2.1.0-12.1 is installed OR gd-32bit-2.1.0-12.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information gimp-2.8.18-8 is installed OR gimp-lang-2.8.18-8 is installed OR gimp-plugins-python-2.8.18-8 is installed OR libgimp-2_0-0-2.8.18-8 is installed OR libgimpui-2_0-0-2.8.18-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information xorg-x11-server-1.19.6-8.3 is installed OR xorg-x11-server-wayland-1.19.6-8.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information gnome-shell-3.26.2+20180130.0d9c74212-4.19 is installed OR gnome-shell-calendar-3.26.2+20180130.0d9c74212-4.19 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information libopencv3_3-3.3.1-6.6 is installed OR opencv-3.3.1-6.6 is installed OR opencv-devel-3.3.1-6.6 is installed
BACK