Oval Definition:oval:org.opensuse.security:def:4654
Revision Date:2022-07-21Version:1
Title:Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP5) (Important)
Description:

This update for the Linux Kernel 4.12.14-122_88 fixes several issues.

The following security issues were fixed:

- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599). - CVE-2022-21499: Reinforced the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb (bsc#1199426). - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
Family:unixClass:patch
Status:Reference(s):1137595
1141025
1151317
1158194
1160968
1163102
1163103
1163104
1165548
1168994
1169511
1169978
1171352
1171883
1172277
1173160
1173258
1173274
1173304
1173812
1174463
1174570
1175476
1175674
1178171
1199697
1200059
1200608
945190
CVE-2014-3577
CVE-2015-5262
CVE-2019-11703
CVE-2019-11704
CVE-2019-11705
CVE-2019-11706
CVE-2019-14562
CVE-2019-15604
CVE-2019-15605
CVE-2019-15606
CVE-2019-19451
CVE-2019-2949
CVE-2020-10713
CVE-2020-10745
CVE-2020-14059
CVE-2020-14308
CVE-2020-14309
CVE-2020-14310
CVE-2020-14311
CVE-2020-14422
CVE-2020-15706
CVE-2020-15707
CVE-2020-2583
CVE-2020-2590
CVE-2020-2593
CVE-2020-2601
CVE-2020-2604
CVE-2020-2654
CVE-2020-2654
CVE-2020-2659
CVE-2020-2754
CVE-2020-2755
CVE-2020-2756
CVE-2020-2757
CVE-2020-2781
CVE-2020-2800
CVE-2020-2803
CVE-2020-2805
CVE-2020-2830
CVE-2020-8903
CVE-2020-8907
CVE-2020-8933
CVE-2022-1729
CVE-2022-20154
CVE-2022-21499
SUSE-SU-2019:1495-1
SUSE-SU-2019:2982-1
SUSE-SU-2019:3391-1
SUSE-SU-2020:0231-1
SUSE-SU-2020:0454-1
SUSE-SU-2020:1213-1
SUSE-SU-2020:1684-1
SUSE-SU-2020:1769-1
SUSE-SU-2020:1822-1
SUSE-SU-2020:1858-1
SUSE-SU-2020:1934-1
SUSE-SU-2020:2065-1
SUSE-SU-2020:2073-1
SUSE-SU-2020:2713-1
SUSE-SU-2020:3151-1
Platform(s):SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Build System Kit 12 SP2
SUSE Linux Enterprise Build System Kit 12 SP3
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise for SAP 12 SP1
SUSE Linux Enterprise High Availability 12
SUSE Linux Enterprise High Availability 12 SP1
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP3
SUSE Linux Enterprise High Availability 12 SP5
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12 SP5
SUSE Linux Enterprise Module for Public Cloud 15 SP1
SUSE Linux Enterprise Module for Public Cloud 15 SP2
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2-LTSS
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for VMWare 11 SP2
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP2
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 5
Product(s):
Definition Synopsis
  • SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed
  • AND haproxy-1.5.4-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP2 is installed
  • AND kernel-zfcpdump-4.4.103-92.56 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP3 is installed
  • AND kernel-zfcpdump-4.4.92-6.30 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • bind-libs-9.9.5P1-1 is installed
  • OR bind-libs-32bit-9.9.5P1-1 is installed
  • OR bind-utils-9.9.5P1-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • aaa_base-13.2+git20140911.61c1681-9 is installed
  • OR aaa_base-extras-13.2+git20140911.61c1681-9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • gdk-pixbuf-loader-rsvg-2.40.15-4 is installed
  • OR librsvg-2-2-2.40.15-4 is installed
  • OR librsvg-2-2-32bit-2.40.15-4 is installed
  • OR rsvg-view-2.40.15-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • cups-filters-1.0.58-17 is installed
  • OR cups-filters-cups-browsed-1.0.58-17 is installed
  • OR cups-filters-foomatic-rip-1.0.58-17 is installed
  • OR cups-filters-ghostscript-1.0.58-17 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • audiofile-0.3.6-10 is installed
  • OR libaudiofile1-0.3.6-10 is installed
  • OR libaudiofile1-32bit-0.3.6-10 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 SP1 is installed
  • AND Package Information
  • libxml2-2.9.1-26.15.1 is installed
  • OR libxml2-2-2.9.1-26.15.1 is installed
  • OR libxml2-2-32bit-2.9.1-26.15.1 is installed
  • OR libxml2-doc-2.9.1-26.15.1 is installed
  • OR libxml2-tools-2.9.1-26.15.1 is installed
  • OR python-libxml2-2.9.1-26.15.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 is installed
  • AND python-PyYAML-3.10-15.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP1 is installed
  • AND Package Information
  • ctdb-4.2.4-26.2 is installed
  • OR samba-4.2.4-26.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP2 is installed
  • AND Package Information
  • libpacemaker3-1.1.15-19 is installed
  • OR pacemaker-1.1.15-19 is installed
  • OR pacemaker-cli-1.1.15-19 is installed
  • OR pacemaker-cts-1.1.15-19 is installed
  • OR pacemaker-remote-1.1.15-19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP3 is installed
  • AND libpcreposix0-8.39-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP5 is installed
  • AND ruby2.1-rubygem-bundler-1.7.3-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND Package Information
  • automake-1.13.4-6 is installed
  • OR m4-1.4.16-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 SP5 is installed
  • AND kgraft-patch-4_12_14-122_88-default-14-2.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
  • AND Package Information
  • rmt-server-2.5.7-3.15 is installed
  • OR rmt-server-pubcloud-2.5.7-3.15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
  • AND Package Information
  • google-compute-engine-20190801-4.38 is installed
  • OR google-compute-engine-init-20190801-4.38 is installed
  • OR google-compute-engine-oslogin-20190801-4.38 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 12 is installed
  • AND Package Information
  • apache2-mod_php7-7.0.7-50.56 is installed
  • OR php7-7.0.7-50.56 is installed
  • OR php7-bcmath-7.0.7-50.56 is installed
  • OR php7-bz2-7.0.7-50.56 is installed
  • OR php7-calendar-7.0.7-50.56 is installed
  • OR php7-ctype-7.0.7-50.56 is installed
  • OR php7-curl-7.0.7-50.56 is installed
  • OR php7-dba-7.0.7-50.56 is installed
  • OR php7-dom-7.0.7-50.56 is installed
  • OR php7-enchant-7.0.7-50.56 is installed
  • OR php7-exif-7.0.7-50.56 is installed
  • OR php7-fastcgi-7.0.7-50.56 is installed
  • OR php7-fileinfo-7.0.7-50.56 is installed
  • OR php7-fpm-7.0.7-50.56 is installed
  • OR php7-ftp-7.0.7-50.56 is installed
  • OR php7-gd-7.0.7-50.56 is installed
  • OR php7-gettext-7.0.7-50.56 is installed
  • OR php7-gmp-7.0.7-50.56 is installed
  • OR php7-iconv-7.0.7-50.56 is installed
  • OR php7-imap-7.0.7-50.56 is installed
  • OR php7-intl-7.0.7-50.56 is installed
  • OR php7-json-7.0.7-50.56 is installed
  • OR php7-ldap-7.0.7-50.56 is installed
  • OR php7-mbstring-7.0.7-50.56 is installed
  • OR php7-mcrypt-7.0.7-50.56 is installed
  • OR php7-mysql-7.0.7-50.56 is installed
  • OR php7-odbc-7.0.7-50.56 is installed
  • OR php7-opcache-7.0.7-50.56 is installed
  • OR php7-openssl-7.0.7-50.56 is installed
  • OR php7-pcntl-7.0.7-50.56 is installed
  • OR php7-pdo-7.0.7-50.56 is installed
  • OR php7-pear-7.0.7-50.56 is installed
  • OR php7-pear-Archive_Tar-7.0.7-50.56 is installed
  • OR php7-pgsql-7.0.7-50.56 is installed
  • OR php7-phar-7.0.7-50.56 is installed
  • OR php7-posix-7.0.7-50.56 is installed
  • OR php7-pspell-7.0.7-50.56 is installed
  • OR php7-shmop-7.0.7-50.56 is installed
  • OR php7-snmp-7.0.7-50.56 is installed
  • OR php7-soap-7.0.7-50.56 is installed
  • OR php7-sockets-7.0.7-50.56 is installed
  • OR php7-sqlite-7.0.7-50.56 is installed
  • OR php7-sysvmsg-7.0.7-50.56 is installed
  • OR php7-sysvsem-7.0.7-50.56 is installed
  • OR php7-sysvshm-7.0.7-50.56 is installed
  • OR php7-tokenizer-7.0.7-50.56 is installed
  • OR php7-wddx-7.0.7-50.56 is installed
  • OR php7-xmlreader-7.0.7-50.56 is installed
  • OR php7-xmlrpc-7.0.7-50.56 is installed
  • OR php7-xmlwriter-7.0.7-50.56 is installed
  • OR php7-xsl-7.0.7-50.56 is installed
  • OR php7-zip-7.0.7-50.56 is installed
  • OR php7-zlib-7.0.7-50.56 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed
  • AND Package Information
  • kernel-firmware-20170530-21.22 is installed
  • OR ucode-amd-20170530-21.22 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • ldapsmb-1.34b-12.24.4 is installed
  • OR libldb1-3.6.3-0.24.4 is installed
  • OR libsmbclient0-3.6.3-0.24.4 is installed
  • OR libsmbclient0-32bit-3.6.3-0.24.4 is installed
  • OR libsmbclient0-x86-3.6.3-0.24.4 is installed
  • OR libtalloc2-3.6.3-0.24.4 is installed
  • OR libtalloc2-32bit-3.6.3-0.24.4 is installed
  • OR libtalloc2-x86-3.6.3-0.24.4 is installed
  • OR libtdb1-3.6.3-0.24.4 is installed
  • OR libtdb1-32bit-3.6.3-0.24.4 is installed
  • OR libtdb1-x86-3.6.3-0.24.4 is installed
  • OR libtevent0-3.6.3-0.24.4 is installed
  • OR libwbclient0-3.6.3-0.24.4 is installed
  • OR libwbclient0-32bit-3.6.3-0.24.4 is installed
  • OR libwbclient0-x86-3.6.3-0.24.4 is installed
  • OR samba-3.6.3-0.24.4 is installed
  • OR samba-32bit-3.6.3-0.24.4 is installed
  • OR samba-client-3.6.3-0.24.4 is installed
  • OR samba-client-32bit-3.6.3-0.24.4 is installed
  • OR samba-client-x86-3.6.3-0.24.4 is installed
  • OR samba-doc-3.6.3-0.24.4 is installed
  • OR samba-krb-printing-3.6.3-0.24.4 is installed
  • OR samba-winbind-3.6.3-0.24.4 is installed
  • OR samba-winbind-32bit-3.6.3-0.24.4 is installed
  • OR samba-winbind-x86-3.6.3-0.24.4 is installed
  • OR samba-x86-3.6.3-0.24.4 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • ldapsmb-1.34b-12.24.4 is installed
  • OR libldb1-3.6.3-0.24.4 is installed
  • OR libsmbclient0-3.6.3-0.24.4 is installed
  • OR libsmbclient0-32bit-3.6.3-0.24.4 is installed
  • OR libsmbclient0-x86-3.6.3-0.24.4 is installed
  • OR libtalloc2-3.6.3-0.24.4 is installed
  • OR libtalloc2-32bit-3.6.3-0.24.4 is installed
  • OR libtalloc2-x86-3.6.3-0.24.4 is installed
  • OR libtdb1-3.6.3-0.24.4 is installed
  • OR libtdb1-32bit-3.6.3-0.24.4 is installed
  • OR libtdb1-x86-3.6.3-0.24.4 is installed
  • OR libtevent0-3.6.3-0.24.4 is installed
  • OR libwbclient0-3.6.3-0.24.4 is installed
  • OR libwbclient0-32bit-3.6.3-0.24.4 is installed
  • OR libwbclient0-x86-3.6.3-0.24.4 is installed
  • OR samba-3.6.3-0.24.4 is installed
  • OR samba-32bit-3.6.3-0.24.4 is installed
  • OR samba-client-3.6.3-0.24.4 is installed
  • OR samba-client-32bit-3.6.3-0.24.4 is installed
  • OR samba-client-x86-3.6.3-0.24.4 is installed
  • OR samba-doc-3.6.3-0.24.4 is installed
  • OR samba-krb-printing-3.6.3-0.24.4 is installed
  • OR samba-winbind-3.6.3-0.24.4 is installed
  • OR samba-winbind-32bit-3.6.3-0.24.4 is installed
  • OR samba-winbind-x86-3.6.3-0.24.4 is installed
  • OR samba-x86-3.6.3-0.24.4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND aaa_base-11-6.65.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • tigervnc-1.3.0-22.3 is installed
  • OR xorg-x11-Xvnc-1.3.0-22.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND apache2-mod_nss-1.0.8-13 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • apache2-2.4.23-14 is installed
  • OR apache2-doc-2.4.23-14 is installed
  • OR apache2-example-pages-2.4.23-14 is installed
  • OR apache2-prefork-2.4.23-14 is installed
  • OR apache2-utils-2.4.23-14 is installed
  • OR apache2-worker-2.4.23-14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • automake-1.13.4-6 is installed
  • OR m4-1.4.16-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • DirectFB-1.7.1-6 is installed
  • OR lib++dfb-1_7-1-1.7.1-6 is installed
  • OR libdirectfb-1_7-1-1.7.1-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12-LTSS is installed
  • AND Package Information
  • bind-9.9.9P1-28.23.1 is installed
  • OR bind-chrootenv-9.9.9P1-28.23.1 is installed
  • OR bind-doc-9.9.9P1-28.23.1 is installed
  • OR bind-libs-9.9.9P1-28.23.1 is installed
  • OR bind-libs-32bit-9.9.9P1-28.23.1 is installed
  • OR bind-utils-9.9.9P1-28.23.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • java-1_8_0-ibm-1.8.0_sr6.10-3.38 is installed
  • OR java-1_8_0-ibm-alsa-1.8.0_sr6.10-3.38 is installed
  • OR java-1_8_0-ibm-devel-1.8.0_sr6.10-3.38 is installed
  • OR java-1_8_0-ibm-plugin-1.8.0_sr6.10-3.38 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND mailx-12.5-28 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND squid-4.12-5.20 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
  • AND Package Information
  • rubygem-actionmailer-2_3-2.3.17-0.9.1 is installed
  • OR rubygem-actionpack-2_3-2.3.17-0.9.1 is installed
  • OR rubygem-activerecord-2_3-2.3.17-0.9.1 is installed
  • OR rubygem-activeresource-2_3-2.3.17-0.9.1 is installed
  • OR rubygem-activesupport-2_3-2.3.17-0.9.1 is installed
  • OR rubygem-rails-2.3.17-0.8.1 is installed
  • OR rubygem-rails-2_3-2.3.17-0.9.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
  • AND Package Information
  • lzo-devel-2.03-12.3.1 is installed
  • OR lzo-devel-32bit-2.03-12.3.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • java-1_7_1-ibm-1.7.1_sr3.20-6.1 is installed
  • OR java-1_7_1-ibm-devel-1.7.1_sr3.20-6.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 is installed
  • AND MozillaFirefox-devel-31.1.0esr-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND aaa_base-malloccheck-13.2+git20140911.61c1681-9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND Package Information
  • FastCGI-2.4.0-167 is installed
  • OR perl-FastCGI-2.4.0-167 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 is installed
  • AND Package Information
  • lhasa-0.2.0-5.1 is installed
  • OR liblhasa0-0.2.0-5.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
  • AND Package Information
  • freerdp-1.0.2-9.1 is installed
  • OR libfreerdp-1_0-1.0.2-9.1 is installed
  • OR libfreerdp-1_0-plugins-1.0.2-9.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP2 is installed
  • AND Package Information
  • gd-2.1.0-20.1 is installed
  • OR gd-32bit-2.1.0-20.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 is installed
  • AND Package Information
  • MozillaThunderbird-60.7.0-3.36 is installed
  • OR MozillaThunderbird-translations-common-60.7.0-3.36 is installed
  • OR MozillaThunderbird-translations-other-60.7.0-3.36 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • MozillaThunderbird-60.7.2-3.43 is installed
  • OR MozillaThunderbird-translations-common-60.7.2-3.43 is installed
  • OR MozillaThunderbird-translations-other-60.7.2-3.43 is installed
    • BACK