Oval Definition:	oval:org.opensuse.security:def:45883
Revision Date: 2020-12-01 Version: 1 Title: Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important) Description: This update for the Linux Kernel 4.4.180-94_124 fixes several issues. The following security issues were fixed: - CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation. (bsc#1176724) - CVE-2020-14381: Fixed a use-after-free in the fast user mutex (futex) wait operation, which could have lead to memory corruption and possibly privilege escalation (bsc#1176011). - CVE-2020-0431: In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. (bsc#1176722) - CVE-2020-25212: A TOCTOU mismatch in the NFS client code could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c (bsc#1176381). - CVE-2020-14386: Fixed a memory corruption which could have lead to an attacker gaining root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity (bsc#1176069). Family: unix Class: patch Status: Reference(s): 1054429 1076958 1087200 1109465 1110194 1111622 1117473 1117740 1122668 1123482 1124525 1127367 1127369 1127370 1128503 1130103 1131830 1133528 1133810 1134395 1134550 1135603 1139358 1140575 1140577 1140868 1141853 1145665 1149323 1149955 1154036 1154037 1160968 1161883 1171946 1172052 1174458 1175070 1175071 1175072 1175109 1176012 1176072 1176382 1176896 1176931 CVE-2017-15107 CVE-2018-10754 CVE-2018-12181 CVE-2018-18074 CVE-2018-18384 CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-20836 CVE-2018-20852 CVE-2018-7191 CVE-2019-10638 CVE-2019-10639 CVE-2019-1125 CVE-2019-11709 CVE-2019-11710 CVE-2019-11711 CVE-2019-11712 CVE-2019-11713 CVE-2019-11714 CVE-2019-11715 CVE-2019-11716 CVE-2019-11717 CVE-2019-11718 CVE-2019-11719 CVE-2019-11720 CVE-2019-11721 CVE-2019-11723 CVE-2019-11724 CVE-2019-11725 CVE-2019-11727 CVE-2019-11728 CVE-2019-11729 CVE-2019-11730 CVE-2019-11733 CVE-2019-11735 CVE-2019-11736 CVE-2019-11738 CVE-2019-11740 CVE-2019-11742 CVE-2019-11743 CVE-2019-11744 CVE-2019-11746 CVE-2019-11747 CVE-2019-11748 CVE-2019-11749 CVE-2019-11750 CVE-2019-11751 CVE-2019-11752 CVE-2019-11753 CVE-2019-16056 CVE-2019-17594 CVE-2019-17595 CVE-2019-3859 CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 CVE-2019-9811 CVE-2019-9812 CVE-2020-0429 CVE-2020-0431 CVE-2020-11985 CVE-2020-11993 CVE-2020-14339 CVE-2020-14381 CVE-2020-14386 CVE-2020-25212 CVE-2020-2583 CVE-2020-2590 CVE-2020-2593 CVE-2020-2601 CVE-2020-2604 CVE-2020-2654 CVE-2020-2659 CVE-2020-8231 CVE-2020-9490 SUSE-SU-2019:0688-1 SUSE-SU-2019:1060-1 SUSE-SU-2019:2620-1 SUSE-SU-2019:3094-1 SUSE-SU-2020:0555-1 SUSE-SU-2020:0628-1 SUSE-SU-2020:2233-1 SUSE-SU-2020:2444-1 SUSE-SU-2020:2450-1 SUSE-SU-2020:3225-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 42.3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Web Scripting 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information NetworkManager-1.10.6-lp150.3 is installed OR NetworkManager-lang-1.10.6-lp150.3 is installed OR libnm-glib-vpn1-1.10.6-lp150.3 is installed OR libnm-glib4-1.10.6-lp150.3 is installed OR libnm-util2-1.10.6-lp150.3 is installed OR libnm0-1.10.6-lp150.3 is installed OR typelib-1_0-NM-1_0-1.10.6-lp150.3 is installed OR typelib-1_0-NMClient-1_0-1.10.6-lp150.3 is installed OR typelib-1_0-NetworkManager-1_0-1.10.6-lp150.3 is installed Definition Synopsis openSUSE Leap 42.3 is installed AND Package Information augeas-1.2.0-12 is installed OR augeas-lenses-1.2.0-12 is installed OR libaugeas0-1.2.0-12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND postgresql-8.3.23-0.4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.4.0esr-0.8 is installed OR MozillaFirefox-branding-SLED-24-0.7 is installed OR MozillaFirefox-translations-24.4.0esr-0.8 is installed OR mozilla-nspr-4.10.4-0.3 is installed OR mozilla-nspr-32bit-4.10.4-0.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libxml2-2-2.9.1-6 is installed OR libxml2-2-32bit-2.9.1-6 is installed OR libxml2-tools-2.9.1-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND cifs-utils-6.4-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libgcrypt20-1.6.1-16.33 is installed OR libgcrypt20-32bit-1.6.1-16.33 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-32bit-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 is installed AND Package Information aaa_base-84.87+git20180409.04c9dae-1 is installed OR aaa_base-extras-84.87+git20180409.04c9dae-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information freetype2-devel-2.9-2 is installed OR libfreetype6-2.9-2 is installed OR libfreetype6-32bit-2.9-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND Package Information evince-3.26.0+20180128.1bd86963-2 is installed OR evince-devel-3.26.0+20180128.1bd86963-2 is installed OR evince-lang-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-djvudocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-dvidocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-pdfdocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-psdocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-tiffdocument-3.26.0+20180128.1bd86963-2 is installed OR evince-plugin-xpsdocument-3.26.0+20180128.1bd86963-2 is installed OR libevdocument3-4-3.26.0+20180128.1bd86963-2 is installed OR libevview3-3-3.26.0+20180128.1bd86963-2 is installed OR nautilus-evince-3.26.0+20180128.1bd86963-2 is installed OR typelib-1_0-EvinceDocument-3_0-3.26.0+20180128.1bd86963-2 is installed OR typelib-1_0-EvinceView-3_0-3.26.0+20180128.1bd86963-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information libraptor-devel-2.0.15-1 is installed OR libraptor2-0-2.0.15-1 is installed OR raptor-2.0.15-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed AND apache-pdfbox-1.8.12-5.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_38-default-4-2 is installed OR kernel-livepatch-SLE15_Update_15-4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_7-default-2-2 is installed OR kernel-livepatch-SLE15-SP1_Update_2-2-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information libraw-0.18.9-3.8 is installed OR libraw-devel-static-0.18.9-3.8 is installed OR libraw-tools-0.18.9-3.8 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed AND Package Information java-11-openjdk-11.0.4.0-3.33 is installed OR java-11-openjdk-accessibility-11.0.4.0-3.33 is installed OR java-11-openjdk-javadoc-11.0.4.0-3.33 is installed OR java-11-openjdk-jmods-11.0.4.0-3.33 is installed OR java-11-openjdk-src-11.0.4.0-3.33 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND terraform-0.12.19-3.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND apache2-mod_nss-1.0.17-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND apache2-mod_wsgi-python3-4.5.18-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 15 is installed AND jakarta-commons-fileupload-1.1.1-4.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information libgssglue1-0.4-3 is installed OR libgssglue1-32bit-0.4-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information libsystemd0-228-150.66 is installed OR libsystemd0-32bit-228-150.66 is installed OR libudev1-228-150.66 is installed OR libudev1-32bit-228-150.66 is installed OR systemd-228-150.66 is installed OR systemd-32bit-228-150.66 is installed OR systemd-bash-completion-228-150.66 is installed OR systemd-sysvinit-228-150.66 is installed OR udev-228-150.66 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_114-92_64-default-9-2 is installed OR kgraft-patch-SLE12-SP2_Update_18-9-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information hostinfo-1.0.1-19.5 is installed OR supportutils-3.0-95.21 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cyrus-sasl-2.1.26-7 is installed OR cyrus-sasl-32bit-2.1.26-7 is installed OR cyrus-sasl-crammd5-2.1.26-7 is installed OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed OR cyrus-sasl-digestmd5-2.1.26-7 is installed OR cyrus-sasl-gssapi-2.1.26-7 is installed OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed OR cyrus-sasl-otp-2.1.26-7 is installed OR cyrus-sasl-otp-32bit-2.1.26-7 is installed OR cyrus-sasl-plain-2.1.26-7 is installed OR cyrus-sasl-plain-32bit-2.1.26-7 is installed OR cyrus-sasl-saslauthd-2.1.26-7 is installed OR cyrus-sasl-sqlauxprop-2.1.26-7 is installed OR cyrus-sasl-sqlauxprop-32bit-2.1.26-7 is installed OR libsasl2-3-2.1.26-7 is installed OR libsasl2-3-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information MozillaFirefox-60.9.0-109.86 is installed OR MozillaFirefox-translations-common-60.9.0-109.86 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND kgraft-patch-4_4_180-94_124-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_33-3-2 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-LTSS is installed AND kgraft-patch-4_4_180-94_124-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_33-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information MozillaFirefox-60.8.0-109.83 is installed OR MozillaFirefox-translations-common-60.8.0-109.83 is installed OR libfreebl3-3.44.1-58.28 is installed OR libfreebl3-32bit-3.44.1-58.28 is installed OR libfreebl3-hmac-3.44.1-58.28 is installed OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed OR libsoftokn3-3.44.1-58.28 is installed OR libsoftokn3-32bit-3.44.1-58.28 is installed OR libsoftokn3-hmac-3.44.1-58.28 is installed OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed OR mozilla-nss-3.44.1-58.28 is installed OR mozilla-nss-32bit-3.44.1-58.28 is installed OR mozilla-nss-certs-3.44.1-58.28 is installed OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed OR mozilla-nss-tools-3.44.1-58.28 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND libwireshark9-2.4.11-48.35 is installed OR libwiretap7-2.4.11-48.35 is installed OR libwscodecs1-2.4.11-48.35 is installed OR libwsutil8-2.4.11-48.35 is installed OR wireshark-2.4.11-48.35 is installed OR wireshark-gtk-2.4.11-48.35 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP3-TERADATA is installed AND libwireshark9-2.4.11-48.35 is installed OR libwiretap7-2.4.11-48.35 is installed OR libwscodecs1-2.4.11-48.35 is installed OR libwsutil8-2.4.11-48.35 is installed OR wireshark-2.4.11-48.35 is installed OR wireshark-gtk-2.4.11-48.35 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libpolkit0-0.113-5.15 is installed OR polkit-0.113-5.15 is installed OR typelib-1_0-Polkit-1_0-0.113-5.15 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND libssh2-1-1.4.3-20.6 is installed OR libssh2-1-32bit-1.4.3-20.6 is installed OR libssh2_org-1.4.3-20.6 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND libssh2-1-1.4.3-20.6 is installed OR libssh2-1-32bit-1.4.3-20.6 is installed OR libssh2_org-1.4.3-20.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information evince-3.20.2-6.22 is installed OR evince-browser-plugin-3.20.2-6.22 is installed OR evince-lang-3.20.2-6.22 is installed OR evince-plugin-djvudocument-3.20.2-6.22 is installed OR evince-plugin-dvidocument-3.20.2-6.22 is installed OR evince-plugin-pdfdocument-3.20.2-6.22 is installed OR evince-plugin-psdocument-3.20.2-6.22 is installed OR evince-plugin-tiffdocument-3.20.2-6.22 is installed OR evince-plugin-xpsdocument-3.20.2-6.22 is installed OR libevdocument3-4-3.20.2-6.22 is installed OR libevview3-3-3.20.2-6.22 is installed OR nautilus-evince-3.20.2-6.22 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed AND libncurses5-5.9-69 is installed OR libncurses5-32bit-5.9-69 is installed OR libncurses6-5.9-69 is installed OR libncurses6-32bit-5.9-69 is installed OR ncurses-5.9-69 is installed OR ncurses-devel-5.9-69 is installed OR ncurses-devel-32bit-5.9-69 is installed OR ncurses-utils-5.9-69 is installed OR tack-5.9-69 is installed OR terminfo-5.9-69 is installed OR terminfo-base-5.9-69 is installed OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND libncurses5-5.9-69 is installed OR libncurses5-32bit-5.9-69 is installed OR libncurses6-5.9-69 is installed OR libncurses6-32bit-5.9-69 is installed OR ncurses-5.9-69 is installed OR ncurses-devel-5.9-69 is installed OR ncurses-devel-32bit-5.9-69 is installed OR ncurses-utils-5.9-69 is installed OR tack-5.9-69 is installed OR terminfo-5.9-69 is installed OR terminfo-base-5.9-69 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information apache2-2.4.33-3.30 is installed OR apache2-devel-2.4.33-3.30 is installed OR apache2-doc-2.4.33-3.30 is installed OR apache2-prefork-2.4.33-3.30 is installed OR apache2-utils-2.4.33-3.30 is installed OR apache2-worker-2.4.33-3.30 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information DirectFB-1.7.1-4 is installed OR libdirectfb-1_7-1-32bit-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information libuuid-devel-2.25-37 is installed OR util-linux-2.25-37 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information firebird-classic-2.5.2.26539-15 is installed OR libfbembed2_5-2.5.2.26539-15 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information kernel-default-4.4.92-6.30 is installed OR kernel-default-extra-4.4.92-6.30 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information python-base-2.7.13-28.26 is installed OR python-devel-2.7.13-28.26 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND Package Information kernel-default-4.12.14-122.37 is installed OR kernel-default-extra-4.12.14-122.37 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information kernel-default-4.12.14-25.19 is installed OR kernel-default-extra-4.12.14-25.19 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information MozillaThunderbird-60.7.2-3.43 is installed OR MozillaThunderbird-translations-common-60.7.2-3.43 is installed OR MozillaThunderbird-translations-other-60.7.2-3.43 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information MozillaFirefox-60.8.0-109.83 is installed OR MozillaFirefox-translations-common-60.8.0-109.83 is installed OR libfreebl3-3.44.1-58.28 is installed OR libfreebl3-32bit-3.44.1-58.28 is installed OR libfreebl3-hmac-3.44.1-58.28 is installed OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed OR libsoftokn3-3.44.1-58.28 is installed OR libsoftokn3-32bit-3.44.1-58.28 is installed OR libsoftokn3-hmac-3.44.1-58.28 is installed OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed OR mozilla-nss-3.44.1-58.28 is installed OR mozilla-nss-32bit-3.44.1-58.28 is installed OR mozilla-nss-certs-3.44.1-58.28 is installed OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-3.44.1-58.28 is installed OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed OR mozilla-nss-tools-3.44.1-58.28 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND nodejs6-6.14.4-11.18 is installed
BACK