| Revision Date: | 2021-09-16 | Version: | 1 |
| Title: | Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important) |
| Description: |
This update for the Linux Kernel 4.12.14-122_83 fixes several issues.
The following security issues were fixed:
- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1136020
1141122
1154862
1157119
1158095
1159913
1160673
1160922
1162117
1162296
1162629
1162632
1162689
1162691
1165280
1165289
1165548
1165631
1166844
1166916
1167373
1167462
1168554
1168994
1169511
1169659
1170313
1170643
1171456
1171457
1171458
1171928
1172442
1172443
1173455
1173812
1174463
1174570
1175132
1175664
1175665
1175671
1175992
1176072
1176382
1181145
1181146
1189278
1189418
1189420
CVE-2019-12519
CVE-2019-12521
CVE-2019-12528
CVE-2019-14889
CVE-2019-17498
CVE-2019-18860
CVE-2019-18904
CVE-2019-18904
CVE-2019-5108
CVE-2020-10531
CVE-2020-10713
CVE-2020-10957
CVE-2020-10958
CVE-2020-10967
CVE-2020-11080
CVE-2020-11945
CVE-2020-14308
CVE-2020-14309
CVE-2020-14310
CVE-2020-14311
CVE-2020-14386
CVE-2020-15049
CVE-2020-15706
CVE-2020-15707
CVE-2020-15810
CVE-2020-15811
CVE-2020-1749
CVE-2020-24394
CVE-2020-24606
CVE-2020-25212
CVE-2020-2754
CVE-2020-2755
CVE-2020-2756
CVE-2020-2757
CVE-2020-2767
CVE-2020-2773
CVE-2020-2778
CVE-2020-2781
CVE-2020-2800
CVE-2020-2803
CVE-2020-2805
CVE-2020-2816
CVE-2020-2830
CVE-2020-3899
CVE-2020-7059
CVE-2020-7060
CVE-2020-7062
CVE-2020-7063
CVE-2020-7598
CVE-2020-8174
CVE-2020-8517
CVE-2020-9484
CVE-2021-3114
CVE-2021-3115
CVE-2021-3653
CVE-2021-3656
CVE-2021-38198
SUSE-SU-2019:2900-2
SUSE-SU-2020:0130-1
SUSE-SU-2020:0260-1
SUSE-SU-2020:0622-1
SUSE-SU-2020:1156-1
SUSE-SU-2020:1179-1
SUSE-SU-2020:1198-1
SUSE-SU-2020:1364-1
SUSE-SU-2020:1379-1
SUSE-SU-2020:1511-1
SUSE-SU-2020:1568-1
SUSE-SU-2020:2073-1
SUSE-SU-2020:2442-1
SUSE-SU-2020:3187-1
SUSE-SU-2021:0223-1
|
| Platform(s): | SUSE Linux Enterprise Build System Kit 12
SUSE Linux Enterprise Build System Kit 12 SP1
SUSE Linux Enterprise Build System Kit 12 SP2
SUSE Linux Enterprise Build System Kit 12 SP3
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Desktop 15 SP2
SUSE Linux Enterprise for SAP 12
SUSE Linux Enterprise High Performance Computing 15 SP2
SUSE Linux Enterprise High Performance Computing 15-ESPOS
SUSE Linux Enterprise High Performance Computing 15-LTSS
SUSE Linux Enterprise Live Patching 12 SP5
SUSE Linux Enterprise Module for Development Tools 15 SP2
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Live Patching 15 SP2
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Server 11 SP1-LTSS
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2-LTSS
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-LTSS
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server 15 SP2
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for SAP Applications 15 SP2
SUSE Linux Enterprise Server for VMWare 11 SP2
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Storage 7
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP3
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE Manager Proxy 4.1
SUSE Manager Server 4.1
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.38-44 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Build System Kit 12 SP1 is installed
AND Package Information
python-tdb-1.3.8-4 is installed
OR python-tevent-0.9.26-4 is installed
OR tdb-1.3.8-4 is installed
OR tevent-0.9.26-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Build System Kit 12 SP2 is installed
AND Package Information
ghostscript-mini-9.15-17 is installed
OR ghostscript-mini-devel-9.15-17 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Build System Kit 12 SP3 is installed
AND Package Information
krb5-mini-1.12.5-40.13 is installed
OR krb5-mini-devel-1.12.5-40.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
ImageMagick-6.8.8.1-5 is installed
OR libMagick++-6_Q16-3-6.8.8.1-5 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-5 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND cifs-utils-6.4-6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
freerdp-2.0.0~git.1463131968.4e66df7-11 is installed
OR libfreerdp2-2.0.0~git.1463131968.4e66df7-11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
aaa_base-13.2+git20140911.61c1681-36 is installed
OR aaa_base-extras-13.2+git20140911.61c1681-36 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
ImageMagick-6.8.8.1-71.85 is installed
OR libMagick++-6_Q16-3-6.8.8.1-71.85 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-71.85 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-71.85 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
AND Package Information
go1.15-1.15.7-1.17.1 is installed
OR go1.15-doc-1.15.7-1.17.1 is installed
OR go1.15-race-1.15.7-1.17.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise for SAP 12 is installed
AND Package Information
kgraft-patch-3_12_51-52_39-default-4-2.2 is installed
OR kgraft-patch-3_12_51-52_39-xen-4-2.2 is installed
OR kgraft-patch-SLE12_Update_11-4-2.2 is installed
|
| Definition Synopsis |
| Release Information
SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed
AND
libjavascriptcoregtk-4_0-18-2.28.2-3.54 is installed
OR libwebkit2gtk-4_0-37-2.28.2-3.54 is installed
OR libwebkit2gtk3-lang-2.28.2-3.54 is installed
OR webkit2gtk-4_0-injected-bundles-2.28.2-3.54 is installed
OR webkit2gtk3-2.28.2-3.54 is installed
OR webkit2gtk3-devel-2.28.2-3.54 is installed
OR Package Information
SUSE Linux Enterprise High Performance Computing 15-LTSS is installed
AND
libjavascriptcoregtk-4_0-18-2.28.2-3.54 is installed
OR libwebkit2gtk-4_0-37-2.28.2-3.54 is installed
OR libwebkit2gtk3-lang-2.28.2-3.54 is installed
OR webkit2gtk-4_0-injected-bundles-2.28.2-3.54 is installed
OR webkit2gtk3-2.28.2-3.54 is installed
OR webkit2gtk3-devel-2.28.2-3.54 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Live Patching 12 SP5 is installed
AND kgraft-patch-4_12_14-122_83-default-2-2.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Legacy Software 12 is installed
AND Package Information
compat-openssl098-0.9.8j-97 is installed
OR libopenssl0_9_8-0.9.8j-97 is installed
OR libopenssl0_9_8-32bit-0.9.8j-97 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-livepatch-4_12_14-197_10-default-6-2 is installed
OR kernel-livepatch-SLE15-SP1_Update_3-6-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed
AND Package Information
kernel-livepatch-5_3_18-22-default-3-8 is installed
OR kernel-livepatch-SLE15-SP2_Update_0-3-8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 12 is installed
AND python-tablib-0.9.11-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 12 is installed
AND Package Information
apache2-mod_php5-5.5.14-56 is installed
OR php5-5.5.14-56 is installed
OR php5-bcmath-5.5.14-56 is installed
OR php5-bz2-5.5.14-56 is installed
OR php5-calendar-5.5.14-56 is installed
OR php5-ctype-5.5.14-56 is installed
OR php5-curl-5.5.14-56 is installed
OR php5-dba-5.5.14-56 is installed
OR php5-dom-5.5.14-56 is installed
OR php5-enchant-5.5.14-56 is installed
OR php5-exif-5.5.14-56 is installed
OR php5-fastcgi-5.5.14-56 is installed
OR php5-fileinfo-5.5.14-56 is installed
OR php5-fpm-5.5.14-56 is installed
OR php5-ftp-5.5.14-56 is installed
OR php5-gd-5.5.14-56 is installed
OR php5-gettext-5.5.14-56 is installed
OR php5-gmp-5.5.14-56 is installed
OR php5-iconv-5.5.14-56 is installed
OR php5-intl-5.5.14-56 is installed
OR php5-json-5.5.14-56 is installed
OR php5-ldap-5.5.14-56 is installed
OR php5-mbstring-5.5.14-56 is installed
OR php5-mcrypt-5.5.14-56 is installed
OR php5-mysql-5.5.14-56 is installed
OR php5-odbc-5.5.14-56 is installed
OR php5-opcache-5.5.14-56 is installed
OR php5-openssl-5.5.14-56 is installed
OR php5-pcntl-5.5.14-56 is installed
OR php5-pdo-5.5.14-56 is installed
OR php5-pear-5.5.14-56 is installed
OR php5-pgsql-5.5.14-56 is installed
OR php5-phar-5.5.14-56 is installed
OR php5-posix-5.5.14-56 is installed
OR php5-pspell-5.5.14-56 is installed
OR php5-shmop-5.5.14-56 is installed
OR php5-snmp-5.5.14-56 is installed
OR php5-soap-5.5.14-56 is installed
OR php5-sockets-5.5.14-56 is installed
OR php5-sqlite-5.5.14-56 is installed
OR php5-suhosin-5.5.14-56 is installed
OR php5-sysvmsg-5.5.14-56 is installed
OR php5-sysvsem-5.5.14-56 is installed
OR php5-sysvshm-5.5.14-56 is installed
OR php5-tokenizer-5.5.14-56 is installed
OR php5-wddx-5.5.14-56 is installed
OR php5-xmlreader-5.5.14-56 is installed
OR php5-xmlrpc-5.5.14-56 is installed
OR php5-xmlwriter-5.5.14-56 is installed
OR php5-xsl-5.5.14-56 is installed
OR php5-zip-5.5.14-56 is installed
OR php5-zlib-5.5.14-56 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 11 SP1-LTSS is installed
AND Package Information
dbus-1-1.2.10-3.25.2 is installed
OR dbus-1-32bit-1.2.10-3.25.2 is installed
OR dbus-1-x11-1.2.10-3.25.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 11 SP4 is installed
AND Package Information
pam_ldap-184-147.20 is installed
OR pam_ldap-32bit-184-147.20 is installed
OR pam_ldap-x86-184-147.20 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 is installed
AND Package Information
libXRes1-1.0.7-3 is installed
OR libXRes1-32bit-1.0.7-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
cpp48-4.8.5-24 is installed
OR gcc48-4.8.5-24 is installed
OR gcc48-32bit-4.8.5-24 is installed
OR gcc48-c++-4.8.5-24 is installed
OR gcc48-info-4.8.5-24 is installed
OR gcc48-locale-4.8.5-24 is installed
OR libasan0-4.8.5-24 is installed
OR libasan0-32bit-4.8.5-24 is installed
OR libstdc++48-devel-4.8.5-24 is installed
OR libstdc++48-devel-32bit-4.8.5-24 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
aaa_base-13.2+git20140911.61c1681-28 is installed
OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND apache2-mod_nss-1.0.14-18 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12-LTSS is installed
AND Package Information
kgraft-patch-3_12_44-52_18-default-6-2.2 is installed
OR kgraft-patch-3_12_44-52_18-xen-6-2.2 is installed
OR kgraft-patch-SLE12_Update_7-6-2.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 15-LTSS is installed
AND squid-4.11-5.17 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
AND Package Information
expat-2.1.0-17 is installed
OR libexpat1-2.1.0-17 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
rmt-server-2.5.7-3.31 is installed
OR rmt-server-config-2.5.7-3.31 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
AND Package Information
libtiff-devel-3.8.2-141.154.1 is installed
OR libtiff-devel-32bit-3.8.2-141.154.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
AND Package Information
MozillaFirefox-38.6.0esr-31.3 is installed
OR MozillaFirefox-devel-38.6.0esr-31.3 is installed
OR mozilla-nss-3.20.2-25.2 is installed
OR mozilla-nss-devel-3.20.2-25.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 is installed
AND Package Information
FastCGI-2.4.0-167 is installed
OR perl-FastCGI-2.4.0-167 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
AND Package Information
ImageMagick-6.8.8.1-8 is installed
OR ImageMagick-devel-6.8.8.1-8 is installed
OR libMagick++-6_Q16-3-6.8.8.1-8 is installed
OR libMagick++-devel-6.8.8.1-8 is installed
OR perl-PerlMagick-6.8.8.1-8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
AND Package Information
sudo-1.8.10p3-8.1 is installed
OR sudo-devel-1.8.10p3-8.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 is installed
AND Package Information
ImageMagick-6.8.8.1-8.2 is installed
OR libMagick++-6_Q16-3-6.8.8.1-8.2 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
AND Package Information
flash-player-11.2.202.559-117.1 is installed
OR flash-player-gnome-11.2.202.559-117.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
AND Package Information
gnome-online-accounts-3.20.5-9 is installed
OR gnome-online-accounts-lang-3.20.5-9 is installed
OR libgoa-1_0-0-32bit-3.20.5-9 is installed
OR typelib-1_0-Goa-1_0-3.20.5-9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
kernel-default-4.12.14-25.3 is installed
OR kernel-default-extra-4.12.14-25.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
MozillaThunderbird-60.7.0-3.36 is installed
OR MozillaThunderbird-translations-common-60.7.0-3.36 is installed
OR MozillaThunderbird-translations-other-60.7.0-3.36 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
AND Package Information
MozillaThunderbird-68.10.0-3.88 is installed
OR MozillaThunderbird-translations-common-68.10.0-3.88 is installed
OR MozillaThunderbird-translations-other-68.10.0-3.88 is installed
|