| Revision Date: | 2022-07-21 | Version: | 1 |
| Title: | Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP5) (Important) |
| Description: |
This update for the Linux Kernel 4.12.14-122_110 fixes several issues.
The following security issues were fixed:
- CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599). - CVE-2022-21499: Reinforced the kernel lockdown feature, until now it's been trivial to break out of it with kgdb or kdb (bsc#1199426). - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1051510
1065600
1065729
1071995
1085030
1085416
1087240
1100352
1103557
1104918
1104967
1112028
1116708
1117963
1117964
1117965
1117966
1117967
1120163
1120507
1129715
1133021
1137526
1137595
1138872
1149032
1152107
1152472
1152489
1154064
1154353
1154492
1155518
1156395
1158755
1159058
1159329
1160634
1160790
1161088
1161089
1161670
1161719
1162002
1163809
1167773
1168669
1169790
1170011
1171078
1171634
1171673
1171688
1171732
1171868
1172108
1172197
1172247
1172257
1172405
1172410
1172418
1172775
1172781
1172782
1172783
1172871
1172906
1172935
1172963
1172999
1173032
1173197
1173265
1173280
1173468
1173485
1173514
1173567
1173573
1173580
1173659
1173798
1173813
1173954
1173999
1174000
1174002
1174003
1174026
1174115
1174387
1174462
1174484
1174543
1174625
1174628
1174645
1174689
1174699
1174737
1174757
1174762
1174770
1174771
1174777
1174805
1174824
1174825
1174852
1174865
1174880
1174897
1174906
1174910
1174913
1174969
1175009
1175010
1175011
1175012
1175013
1175014
1175015
1175016
1175017
1175018
1175019
1175020
1175021
1175052
1175112
1175116
1175128
1175149
1175175
1175176
1175180
1175181
1175182
1175183
1175184
1175185
1175186
1175187
1175188
1175189
1175190
1175191
1175192
1175195
1175199
1175213
1175232
1175263
1175284
1175296
1175344
1175345
1175346
1175347
1175367
1175377
1175440
1175493
1175546
1175550
1175654
1175691
1175768
1175769
1175770
1175771
1175772
1175774
1175775
1175834
1175873
1176590
1199697
1200059
1200608
CVE-2018-0886
CVE-2018-1000852
CVE-2018-13301
CVE-2018-8784
CVE-2018-8785
CVE-2018-8786
CVE-2018-8787
CVE-2018-8788
CVE-2018-8789
CVE-2019-11703
CVE-2019-11704
CVE-2019-11705
CVE-2019-11706
CVE-2019-11707
CVE-2019-11708
CVE-2019-12730
CVE-2019-16746
CVE-2019-16785
CVE-2019-16786
CVE-2019-16789
CVE-2019-16792
CVE-2019-17542
CVE-2019-20908
CVE-2019-8835
CVE-2019-8844
CVE-2019-8846
CVE-2019-9718
CVE-2020-0305
CVE-2020-10749
CVE-2020-10766
CVE-2020-10767
CVE-2020-10768
CVE-2020-10769
CVE-2020-10773
CVE-2020-12402
CVE-2020-12771
CVE-2020-12888
CVE-2020-13974
CVE-2020-14093
CVE-2020-14154
CVE-2020-14314
CVE-2020-14344
CVE-2020-14356
CVE-2020-14361
CVE-2020-14362
CVE-2020-14374
CVE-2020-14375
CVE-2020-14376
CVE-2020-14377
CVE-2020-14378
CVE-2020-14416
CVE-2020-14954
CVE-2020-15393
CVE-2020-15780
CVE-2020-16166
CVE-2020-3862
CVE-2020-3864
CVE-2020-3865
CVE-2020-3867
CVE-2020-3868
CVE-2020-4044
CVE-2020-8022
CVE-2022-1729
CVE-2022-20154
CVE-2022-21499
SUSE-SU-2019:0539-1
SUSE-SU-2019:1683-1
SUSE-SU-2019:3184-1
SUSE-SU-2020:0468-1
SUSE-SU-2020:1771-1
SUSE-SU-2020:1789-1
SUSE-SU-2020:1850-1
SUSE-SU-2020:1933-1
SUSE-SU-2020:1957-1
SUSE-SU-2020:2116-1
SUSE-SU-2020:2398-1
SUSE-SU-2020:2485-1
SUSE-SU-2020:2767-1
SUSE-SU-2020:3269-1
|
| Platform(s): | SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Build System Kit 12 SP2
SUSE Linux Enterprise Build System Kit 12 SP3
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise for SAP 12 SP2
SUSE Linux Enterprise High Availability 12
SUSE Linux Enterprise High Availability 12 SP1
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP3
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12 SP5
SUSE Linux Enterprise Module for Public Cloud 15 SP1
SUSE Linux Enterprise Module for Public Cloud 15 SP2
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2-LTSS
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-LTSS
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server for VMWare 11 SP2
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP2
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE OpenStack Cloud 5
| Product(s): | |
| Definition Synopsis |
| SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 is installed AND python-Beaker-1.6.4-0.7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Build System Kit 12 SP2 is installed
AND kernel-zfcpdump-4.4.114-92.64 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Build System Kit 12 SP3 is installed
AND Package Information
libpoppler-cpp0-0.43.0-16.5 is installed
OR poppler-0.43.0-16.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND cifs-utils-6.4-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND argyllcms-1.6.3-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND Package Information
gimp-2.8.18-4 is installed
OR gimp-lang-2.8.18-4 is installed
OR gimp-plugins-python-2.8.18-4 is installed
OR libgimp-2_0-0-2.8.18-4 is installed
OR libgimpui-2_0-0-2.8.18-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND cvs-1.12.12-181 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
ImageMagick-6.8.8.1-71.85 is installed
OR libMagick++-6_Q16-3-6.8.8.1-71.85 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-71.85 is installed
OR libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-71.85 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise for SAP 12 SP2 is installed
AND cryptctl-1.2.6-5.3.11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 is installed
AND Package Information
ctdb-4.2.4-18.30.1 is installed
OR samba-4.2.4-18.30.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP1 is installed
AND hawk2-1.0.1+git.1456406635.49e230d-12.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP2 is installed
AND python-requests-2.8.1-6.11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Availability 12 SP3 is installed
AND ruby2.1-rubygem-bundler-1.7.3-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
AND Package Information
MozillaFirefox-68.1.0-109.92 is installed
OR MozillaFirefox-translations-common-68.1.0-109.92 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Live Patching 12 SP5 is installed
AND kgraft-patch-4_12_14-122_110-default-8-2.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed
AND cni-plugins-0.8.6-3.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 SP2 is installed
AND Package Information
kernel-azure-5.3.18-18.15 is installed
OR kernel-azure-devel-5.3.18-18.15 is installed
OR kernel-devel-azure-5.3.18-18.15 is installed
OR kernel-source-azure-5.3.18-18.15 is installed
OR kernel-syms-azure-5.3.18-18.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Web Scripting 12 is installed
AND Package Information
apache2-mod_php7-7.0.7-50.32 is installed
OR php7-7.0.7-50.32 is installed
OR php7-bcmath-7.0.7-50.32 is installed
OR php7-bz2-7.0.7-50.32 is installed
OR php7-calendar-7.0.7-50.32 is installed
OR php7-ctype-7.0.7-50.32 is installed
OR php7-curl-7.0.7-50.32 is installed
OR php7-dba-7.0.7-50.32 is installed
OR php7-dom-7.0.7-50.32 is installed
OR php7-enchant-7.0.7-50.32 is installed
OR php7-exif-7.0.7-50.32 is installed
OR php7-fastcgi-7.0.7-50.32 is installed
OR php7-fileinfo-7.0.7-50.32 is installed
OR php7-fpm-7.0.7-50.32 is installed
OR php7-ftp-7.0.7-50.32 is installed
OR php7-gd-7.0.7-50.32 is installed
OR php7-gettext-7.0.7-50.32 is installed
OR php7-gmp-7.0.7-50.32 is installed
OR php7-iconv-7.0.7-50.32 is installed
OR php7-imap-7.0.7-50.32 is installed
OR php7-intl-7.0.7-50.32 is installed
OR php7-json-7.0.7-50.32 is installed
OR php7-ldap-7.0.7-50.32 is installed
OR php7-mbstring-7.0.7-50.32 is installed
OR php7-mcrypt-7.0.7-50.32 is installed
OR php7-mysql-7.0.7-50.32 is installed
OR php7-odbc-7.0.7-50.32 is installed
OR php7-opcache-7.0.7-50.32 is installed
OR php7-openssl-7.0.7-50.32 is installed
OR php7-pcntl-7.0.7-50.32 is installed
OR php7-pdo-7.0.7-50.32 is installed
OR php7-pear-7.0.7-50.32 is installed
OR php7-pear-Archive_Tar-7.0.7-50.32 is installed
OR php7-pgsql-7.0.7-50.32 is installed
OR php7-phar-7.0.7-50.32 is installed
OR php7-posix-7.0.7-50.32 is installed
OR php7-pspell-7.0.7-50.32 is installed
OR php7-shmop-7.0.7-50.32 is installed
OR php7-snmp-7.0.7-50.32 is installed
OR php7-soap-7.0.7-50.32 is installed
OR php7-sockets-7.0.7-50.32 is installed
OR php7-sqlite-7.0.7-50.32 is installed
OR php7-sysvmsg-7.0.7-50.32 is installed
OR php7-sysvsem-7.0.7-50.32 is installed
OR php7-sysvshm-7.0.7-50.32 is installed
OR php7-tokenizer-7.0.7-50.32 is installed
OR php7-wddx-7.0.7-50.32 is installed
OR php7-xmlreader-7.0.7-50.32 is installed
OR php7-xmlrpc-7.0.7-50.32 is installed
OR php7-xmlwriter-7.0.7-50.32 is installed
OR php7-xsl-7.0.7-50.32 is installed
OR php7-zip-7.0.7-50.32 is installed
OR php7-zlib-7.0.7-50.32 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed
AND Package Information
java-1_8_0-openjdk-1.8.0.171-27.19 is installed
OR java-1_8_0-openjdk-demo-1.8.0.171-27.19 is installed
OR java-1_8_0-openjdk-devel-1.8.0.171-27.19 is installed
OR java-1_8_0-openjdk-headless-1.8.0.171-27.19 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 11 SP2 is installed
AND Package Information
apache2-2.2.12-1.28.1 is installed
OR apache2-doc-2.2.12-1.28.1 is installed
OR apache2-example-pages-2.2.12-1.28.1 is installed
OR apache2-prefork-2.2.12-1.28.1 is installed
OR apache2-utils-2.2.12-1.28.1 is installed
OR apache2-worker-2.2.12-1.28.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 11 SP2-LTSS is installed
AND Package Information
libfreebl3-3.16.5-0.4.2.1 is installed
OR libfreebl3-32bit-3.16.5-0.4.2.1 is installed
OR mozilla-nss-3.16.5-0.4.2.1 is installed
OR mozilla-nss-32bit-3.16.5-0.4.2.1 is installed
OR mozilla-nss-devel-3.16.5-0.4.2.1 is installed
OR mozilla-nss-tools-3.16.5-0.4.2.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 is installed
AND Package Information
ImageMagick-6.8.8.1-8.2 is installed
OR libMagickCore-6_Q16-1-6.8.8.1-8.2 is installed
OR libMagickWand-6_Q16-1-6.8.8.1-8.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND autofs-5.0.9-8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND apache2-mod_perl-2.0.8-11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND Package Information
bind-9.9.9P1-62 is installed
OR bind-chrootenv-9.9.9P1-62 is installed
OR bind-doc-9.9.9P1-62 is installed
OR bind-libs-9.9.9P1-62 is installed
OR bind-libs-32bit-9.9.9P1-62 is installed
OR bind-utils-9.9.9P1-62 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND SuSEfirewall2-3.6.312.333-3.13 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12-LTSS is installed
AND Package Information
kgraft-patch-3_12_60-52_54-default-2-2.2 is installed
OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed
OR kgraft-patch-SLE12_Update_15-2-2.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 15-LTSS is installed
AND Package Information
mutt-1.10.1-3.8 is installed
OR mutt-doc-1.10.1-3.8 is installed
OR mutt-lang-1.10.1-3.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
AND mutt-1.6.0-54 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
tomcat-9.0.35-3.57 is installed
OR tomcat-admin-webapps-9.0.35-3.57 is installed
OR tomcat-el-3_0-api-9.0.35-3.57 is installed
OR tomcat-jsp-2_3-api-9.0.35-3.57 is installed
OR tomcat-lib-9.0.35-3.57 is installed
OR tomcat-servlet-4_0-api-9.0.35-3.57 is installed
OR tomcat-webapps-9.0.35-3.57 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 11 SP2 is installed
AND rubygem-activerecord-2_3-2.3.14-0.10.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
AND Package Information
libmspack-0.0.20060920alpha-74.10.1 is installed
OR libmspack-devel-0.0.20060920alpha-74.10.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
AND Package Information
java-1_7_1-ibm-1.7.1_sr3.60-19.2 is installed
OR java-1_7_1-ibm-devel-1.7.1_sr3.60-19.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 is installed
AND alsa-devel-1.0.27.2-11 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
AND Package Information
ant-1.9.4-1 is installed
OR ant-jmf-1.9.4-1 is installed
OR ant-scripts-1.9.4-1 is installed
OR ant-swing-1.9.4-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
AND MozillaFirefox-devel-45.4.0esr-81 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 is installed
AND Package Information
libmysqlclient_r18-10.0.22-20.3.1 is installed
OR libmysqlclient_r18-32bit-10.0.22-20.3.1 is installed
OR mariadb-10.0.22-20.3.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
AND Package Information
kernel-default-3.12.62-60.64.8.2 is installed
OR kernel-default-extra-3.12.62-60.64.8.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 12 SP2 is installed
AND Package Information
gstreamer-0_10-plugins-bad-0.10.23-22.5 is installed
OR gstreamer-0_10-plugins-bad-lang-0.10.23-22.5 is installed
OR libgstbasecamerabinsrc-0_10-23-0.10.23-22.5 is installed
OR libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-22.5 is installed
OR libgstbasevideo-0_10-23-0.10.23-22.5 is installed
OR libgstbasevideo-0_10-23-32bit-0.10.23-22.5 is installed
OR libgstcodecparsers-0_10-23-0.10.23-22.5 is installed
OR libgstphotography-0_10-23-0.10.23-22.5 is installed
OR libgstphotography-0_10-23-32bit-0.10.23-22.5 is installed
OR libgstsignalprocessor-0_10-23-0.10.23-22.5 is installed
OR libgstsignalprocessor-0_10-23-32bit-0.10.23-22.5 is installed
OR libgstvdp-0_10-23-0.10.23-22.5 is installed
OR libgstvdp-0_10-23-32bit-0.10.23-22.5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
MozillaThunderbird-60.7.2-3.43 is installed
OR MozillaThunderbird-translations-common-60.7.2-3.43 is installed
OR MozillaThunderbird-translations-other-60.7.2-3.43 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
AND Package Information
libixion-0.14.1-4.3 is installed
OR libixion-0_14-0-0.14.1-4.3 is installed
OR liborcus-0.14.1-3.3 is installed
OR liborcus-0_14-0-0.14.1-3.3 is installed
OR liborcus-devel-0.14.1-3.3 is installed
OR myspell-af_ZA-20190423-3.9 is installed
OR myspell-ar-20190423-3.9 is installed
OR myspell-bg_BG-20190423-3.9 is installed
OR myspell-bn_BD-20190423-3.9 is installed
OR myspell-br_FR-20190423-3.9 is installed
OR myspell-ca-20190423-3.9 is installed
OR myspell-cs_CZ-20190423-3.9 is installed
OR myspell-da_DK-20190423-3.9 is installed
OR myspell-dictionaries-20190423-3.9 is installed
OR myspell-el_GR-20190423-3.9 is installed
OR myspell-et_EE-20190423-3.9 is installed
OR myspell-fr_FR-20190423-3.9 is installed
OR myspell-gl-20190423-3.9 is installed
OR myspell-gu_IN-20190423-3.9 is installed
OR myspell-he_IL-20190423-3.9 is installed
OR myspell-hi_IN-20190423-3.9 is installed
OR myspell-hr_HR-20190423-3.9 is installed
OR myspell-it_IT-20190423-3.9 is installed
OR myspell-lt_LT-20190423-3.9 is installed
OR myspell-lv_LV-20190423-3.9 is installed
OR myspell-nl_NL-20190423-3.9 is installed
OR myspell-nn_NO-20190423-3.9 is installed
OR myspell-pl_PL-20190423-3.9 is installed
OR myspell-pt_PT-20190423-3.9 is installed
OR myspell-si_LK-20190423-3.9 is installed
OR myspell-sk_SK-20190423-3.9 is installed
OR myspell-sl_SI-20190423-3.9 is installed
OR myspell-sr-20190423-3.9 is installed
OR myspell-sv_SE-20190423-3.9 is installed
OR myspell-te_IN-20190423-3.9 is installed
OR myspell-th_TH-20190423-3.9 is installed
OR myspell-tr_TR-20190423-3.9 is installed
OR myspell-uk_UA-20190423-3.9 is installed
OR myspell-zu_ZA-20190423-3.9 is installed
|