Oval Definition:	oval:org.opensuse.security:def:4494
Revision Date: 2021-10-12 Version: 1 Title: Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP5) (Important) Description: This update for the Linux Kernel 4.12.14-122_83 fixes several issues. The following security issues were fixed: - CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613) - CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054). Family: unix Class: patch Status: Reference(s): 1051510 1058115 1065729 1071995 1082318 1104967 1133297 1140844 1150711 1152107 1152489 1152990 1152992 1152994 1152995 1153274 1154063 1154353 1154366 1155518 1155690 1156202 1158755 1159913 1160682 1162002 1162396 1164648 1164804 1165629 1165631 1170011 1170603 1170771 1171078 1171477 1171550 1171673 1171732 1171868 1171988 1172225 1172257 1172428 1172461 1172506 1172775 1172781 1172782 1172783 1172906 1172935 1172999 1173197 1173265 1173280 1173514 1173567 1173573 1173659 1173798 1173999 1174000 1174115 1174205 1174462 1174543 1174757 1174978 1175112 1175122 1175128 1175204 1175213 1175515 1175518 1175691 1175992 1176069 1176771 1177513 1177729 1179610 1182470 1183712 1184212 1184685 1185195 1185486 1185589 1185675 1185677 1185701 1186206 1186463 1186666 1186672 1186752 1186949 1186950 1186951 1186952 1186953 1186954 1186955 1186956 1186957 1186958 1186959 1186960 1186961 1186962 1186963 1186964 1186965 1186966 1186967 1186968 1186969 1186970 1186971 1186972 1186973 1186974 1186976 1186977 1186978 1186979 1186980 1186981 1186982 1186983 1186984 1186985 1186986 1186987 1186988 1186989 1186990 1186991 1186992 1186993 1186994 1186995 1186996 1186997 1186998 1186999 1187000 1187001 1187002 1187003 1187038 1187050 1187054 1187067 1187068 1187069 1187072 1187143 1187144 1187171 1187263 1187356 1187402 1187403 1187404 1187407 1187408 1187409 1187410 1187411 1187412 1187413 1187452 1187554 1187595 1187601 1187795 1187867 1187883 1187886 1187927 1187972 1187980 1188613 CVE-2012-6708 CVE-2015-9251 CVE-2019-15845 CVE-2019-16201 CVE-2019-16254 CVE-2019-16255 CVE-2019-16746 CVE-2019-20372 CVE-2019-20807 CVE-2019-20908 CVE-2019-5108 CVE-2020-0305 CVE-2020-10135 CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10769 CVE-2020-10773 CVE-2020-12243 CVE-2020-12268 CVE-2020-12351 CVE-2020-12771 CVE-2020-12888 CVE-2020-13249 CVE-2020-13777 CVE-2020-13974 CVE-2020-14093 CVE-2020-14154 CVE-2020-14314 CVE-2020-14331 CVE-2020-14356 CVE-2020-14386 CVE-2020-14416 CVE-2020-14954 CVE-2020-15393 CVE-2020-15780 CVE-2020-16166 CVE-2020-1749 CVE-2020-24394 CVE-2020-25645 CVE-2020-26558 CVE-2020-36385 CVE-2020-36386 CVE-2020-8130 CVE-2021-0129 CVE-2021-0512 CVE-2021-0605 CVE-2021-33624 CVE-2021-34693 CVE-2021-3573 CVE-2021-3640 SUSE-SU-2020:0737-1 SUSE-SU-2020:1171-1 SUSE-SU-2020:1219-1 SUSE-SU-2020:1220-1 SUSE-SU-2020:1334-1 SUSE-SU-2020:1396-2 SUSE-SU-2020:1423-1 SUSE-SU-2020:1551-1 SUSE-SU-2020:1584-1 SUSE-SU-2020:1771-1 SUSE-SU-2020:2583-1 SUSE-SU-2020:2610-1 SUSE-SU-2020:3402-1 SUSE-SU-2021:2325-1 SUSE-SU-2021:3361-1 Platform(s): SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP2 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Server 4.1 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-22 is installed OR krb5-mini-devel-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-84 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information krb5-mini-1.12.5-40.16 is installed OR krb5-mini-devel-1.12.5-40.16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information colord-1.1.7-5 is installed OR colord-gtk-lang-0.1.25-3 is installed OR colord-lang-1.1.7-5 is installed OR libcolord-gtk1-0.1.25-3 is installed OR libcolord2-1.1.7-5 is installed OR libcolord2-32bit-1.1.7-5 is installed OR libcolorhug2-1.1.7-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information fuse-2.9.3-5 is installed OR libfuse2-2.9.3-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR libnm-glib-vpn1-1.0.12-13.6 is installed OR libnm-glib4-1.0.12-13.6 is installed OR libnm-util2-1.0.12-13.6 is installed OR libnm0-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed OR typelib-1_0-NMClient-1_0-1.0.12-13.6 is installed OR typelib-1_0-NetworkManager-1_0-1.0.12-13.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed AND Package Information kernel-docs-5.3.18-24.70.1 is installed OR kernel-obs-build-5.3.18-24.70.1 is installed OR kernel-preempt-devel-5.3.18-24.70.1 is installed OR kernel-source-5.3.18-24.70.1 is installed OR kernel-syms-5.3.18-24.70.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_48-52_27-default-5-2.2 is installed OR kgraft-patch-3_12_48-52_27-xen-5-2.2 is installed OR kgraft-patch-SLE12_Update_8-5-2.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 15-ESPOS is installed AND ghostscript-9.52-3.27 is installed OR ghostscript-devel-9.52-3.27 is installed OR ghostscript-x11-9.52-3.27 is installed OR Package Information SUSE Linux Enterprise High Performance Computing 15-LTSS is installed AND ghostscript-9.52-3.27 is installed OR ghostscript-devel-9.52-3.27 is installed OR ghostscript-x11-9.52-3.27 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP5 is installed AND kgraft-patch-4_12_14-122_83-default-3-2.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.26-37 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.26-37 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.26-37 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.26-37 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_4-default-9-2 is installed OR kernel-livepatch-SLE15-SP1_Update_1-9-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND Package Information kernel-livepatch-5_3_18-24_24-default-3-2 is installed OR kernel-livepatch-SLE15-SP2_Update_4-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.39-47 is installed OR kernel-ec2-devel-3.12.39-47 is installed OR kernel-ec2-extra-3.12.39-47 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-64 is installed OR imap-2007e_suse-19 is installed OR libc-client2007e_suse-2007e_suse-19 is installed OR php5-5.5.14-64 is installed OR php5-bcmath-5.5.14-64 is installed OR php5-bz2-5.5.14-64 is installed OR php5-calendar-5.5.14-64 is installed OR php5-ctype-5.5.14-64 is installed OR php5-curl-5.5.14-64 is installed OR php5-dba-5.5.14-64 is installed OR php5-dom-5.5.14-64 is installed OR php5-enchant-5.5.14-64 is installed OR php5-exif-5.5.14-64 is installed OR php5-fastcgi-5.5.14-64 is installed OR php5-fileinfo-5.5.14-64 is installed OR php5-fpm-5.5.14-64 is installed OR php5-ftp-5.5.14-64 is installed OR php5-gd-5.5.14-64 is installed OR php5-gettext-5.5.14-64 is installed OR php5-gmp-5.5.14-64 is installed OR php5-iconv-5.5.14-64 is installed OR php5-imap-5.5.14-64 is installed OR php5-intl-5.5.14-64 is installed OR php5-json-5.5.14-64 is installed OR php5-ldap-5.5.14-64 is installed OR php5-mbstring-5.5.14-64 is installed OR php5-mcrypt-5.5.14-64 is installed OR php5-mysql-5.5.14-64 is installed OR php5-odbc-5.5.14-64 is installed OR php5-opcache-5.5.14-64 is installed OR php5-openssl-5.5.14-64 is installed OR php5-pcntl-5.5.14-64 is installed OR php5-pdo-5.5.14-64 is installed OR php5-pear-5.5.14-64 is installed OR php5-pgsql-5.5.14-64 is installed OR php5-phar-5.5.14-64 is installed OR php5-posix-5.5.14-64 is installed OR php5-pspell-5.5.14-64 is installed OR php5-shmop-5.5.14-64 is installed OR php5-snmp-5.5.14-64 is installed OR php5-soap-5.5.14-64 is installed OR php5-sockets-5.5.14-64 is installed OR php5-sqlite-5.5.14-64 is installed OR php5-suhosin-5.5.14-64 is installed OR php5-sysvmsg-5.5.14-64 is installed OR php5-sysvsem-5.5.14-64 is installed OR php5-sysvshm-5.5.14-64 is installed OR php5-tokenizer-5.5.14-64 is installed OR php5-wddx-5.5.14-64 is installed OR php5-xmlreader-5.5.14-64 is installed OR php5-xmlrpc-5.5.14-64 is installed OR php5-xmlwriter-5.5.14-64 is installed OR php5-xsl-5.5.14-64 is installed OR php5-zip-5.5.14-64 is installed OR php5-zlib-5.5.14-64 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information MozillaFirefox-17.0.6esr-0.4.1 is installed OR MozillaFirefox-branding-SLED-7-0.6.9.20 is installed OR MozillaFirefox-translations-17.0.6esr-0.4.1 is installed OR libfreebl3-3.14.3-0.4.3.1 is installed OR libfreebl3-32bit-3.14.3-0.4.3.1 is installed OR mozilla-nspr-4.9.6-0.3.1 is installed OR mozilla-nspr-32bit-4.9.6-0.3.1 is installed OR mozilla-nss-3.14.3-0.4.3.1 is installed OR mozilla-nss-32bit-3.14.3-0.4.3.1 is installed OR mozilla-nss-tools-3.14.3-0.4.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information pango-1.26.2-1.3.1 is installed OR pango-32bit-1.26.2-1.3.1 is installed OR pango-doc-1.26.2-1.3.1 is installed OR pango-x86-1.26.2-1.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information libXext6-1.3.2-3 is installed OR libXext6-32bit-1.3.2-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cups-1.7.5-9 is installed OR cups-client-1.7.5-9 is installed OR cups-libs-1.7.5-9 is installed OR cups-libs-32bit-1.7.5-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information at-3.1.14-7 is installed OR flex-2.5.37-8 is installed OR flex-32bit-2.5.37-8 is installed OR libQtWebKit4-4.8.6+2.3.3-3 is installed OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-doc-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_51-52_34-default-5-2.2 is installed OR kgraft-patch-3_12_51-52_34-xen-5-2.2 is installed OR kgraft-patch-SLE12_Update_10-5-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server 15-LTSS is installed AND nginx-1.16.1-3.12 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information file-5.19-9 is installed OR file-magic-5.19-9 is installed OR libmagic1-5.19-9 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libldap-2_4-2-2.4.46-9.28 is installed OR libldap-2_4-2-32bit-2.4.46-9.28 is installed OR libldap-data-2.4.46-9.28 is installed OR openldap2-2.4.46-9.28 is installed OR openldap2-back-meta-2.4.46-9.28 is installed OR openldap2-back-perl-2.4.46-9.28 is installed OR openldap2-client-2.4.46-9.28 is installed OR openldap2-devel-2.4.46-9.28 is installed OR openldap2-devel-32bit-2.4.46-9.28 is installed OR openldap2-devel-static-2.4.46-9.28 is installed OR openldap2-ppolicy-check-password-1.2-9.28 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information libvirt-devel-0.9.6-0.23.1 is installed OR libvirt-devel-32bit-0.9.6-0.23.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information mozilla-nss-3.19.2.2-22.1 is installed OR mozilla-nss-devel-3.19.2.2-22.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND MozillaFirefox-devel-31.1.0esr-1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND aaa_base-malloccheck-13.2+git20140911.61c1681-9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information jasper-1.900.14-181.1 is installed OR libjasper-devel-1.900.14-181.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information flash-player-11.2.202.425-19.1 is installed OR flash-player-gnome-11.2.202.425-19.1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information kernel-default-3.12.51-60.20.2 is installed OR kernel-default-extra-3.12.51-60.20.2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information gstreamer-0_10-plugins-bad-0.10.23-25 is installed OR gstreamer-0_10-plugins-bad-lang-0.10.23-25 is installed OR libgstbasecamerabinsrc-0_10-23-0.10.23-25 is installed OR libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-25 is installed OR libgstbasevideo-0_10-23-0.10.23-25 is installed OR libgstbasevideo-0_10-23-32bit-0.10.23-25 is installed OR libgstcodecparsers-0_10-23-0.10.23-25 is installed OR libgstphotography-0_10-23-0.10.23-25 is installed OR libgstphotography-0_10-23-32bit-0.10.23-25 is installed OR libgstsignalprocessor-0_10-23-0.10.23-25 is installed OR libgstsignalprocessor-0_10-23-32bit-0.10.23-25 is installed OR libgstvdp-0_10-23-0.10.23-25 is installed OR libgstvdp-0_10-23-32bit-0.10.23-25 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.6 is installed OR kernel-default-extra-4.12.14-25.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND enigmail-2.0.11-3.16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information openconnect-7.08-6.9 is installed OR openconnect-devel-7.08-6.9 is installed OR openconnect-lang-7.08-6.9 is installed
BACK