Oval Definition:oval:org.opensuse.security:def:5035
Revision Date:2021-05-13Version:1
Title:Security update for the Linux Kernel (Important)
Description:

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.



The following security bugs were fixed:

- CVE-2020-36312: Fixed an issue within virt/kvm/kvm_main.c that had a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure (bnc#1184509). - CVE-2021-29650: Fixed an issue within the netfilter subsystem that allowed attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value (bnc#1184208). - CVE-2021-29155: Fixed an issue within kernel/bpf/verifier.c that performed undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations (bnc#1184942). - CVE-2020-36310: Fixed an issue within arch/x86/kvm/svm/svm.c that allowed a set_memory_region_test infinite loop for certain nested page faults (bnc#1184512). - CVE-2021-28950: Fixed an issue within fs/fuse/fuse_i.h where a 'stall on CPU' could have occured because a retry loop continually finds the same bad inode (bnc#1184194, bnc#1184211). - CVE-2020-36322: Fixed an issue within the FUSE filesystem implementation where fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bnc#1184211, bnc#1184952). - CVE-2021-3444: Fixed incorrect mod32 BPF verifier truncation (bsc#1184170).

The following non-security bugs were fixed:

- arm64: PCI: mobiveil: remove driver Prepare to replace it with upstreamed driver - blk-settings: align max_sectors on 'logical_block_size' boundary (bsc#1185195). - block: fix use-after-free on cached last_lookup partition (bsc#1181062). - block: recalculate segment count for multi-segment discards correctly (bsc#1184724). - btrfs: fix qgroup data rsv leak caused by falloc failure (bsc#1185549). - btrfs: track qgroup released data in own variable in insert_prealloc_file_extent (bsc#1185549). - cdc-acm: fix BREAK rx code path adding necessary calls (git-fixes). - cxgb4: avoid collecting SGE_QBASE regs during traffic (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584). - drivers/perf: thunderx2_pmu: Fix memory resource error handling (git-fixes). - ext4: find old entry again if failed to rename whiteout (bsc#1184742). - ext4: fix potential error in ext4_do_update_inode (bsc#1184731). - fs: direct-io: fix missing sdio->boundary (bsc#1184736). - handle also the opposite type of race condition - i40e: Fix display statistics for veb_tc (bsc#1111981). - i40e: Fix kernel oops when i40e driver removes VF's (bsc#1101816 ). - i40e: Fix sparse warning: missing error code 'err' (jsc#SLE-4797). - ibmvnic: avoid calling napi_disable() twice (bsc#1065729). - ibmvnic: clean up the remaining debugfs data structures (bsc#1065729). - ibmvnic: Continue with reset if set link down failed (bsc#1184350 ltc#191533). - ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681 git-fixes). - ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432 git-fixes). - ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432 git-fixes). - ibmvnic: queue reset work in system_long_wq (bsc#1152457 ltc#174432 git-fixes). - ibmvnic: remove duplicate napi_schedule call in do_reset function (bsc#1065729). - ibmvnic: remove duplicate napi_schedule call in open function (bsc#1065729). - ice: Cleanup fltr list in case of allocation issues (bsc#1118661 ). - ice: Fix for dereference of NULL pointer (bsc#1118661 ). - igc: Fix Pause Frame Advertising (jsc#SLE-4799). - igc: Fix Supported Pause Frame Link Setting (jsc#SLE-4799). - igc: reinit_locked() should be called with rtnl_lock (bsc#1118657). - iopoll: introduce read_poll_timeout macro (git-fixes). - isofs: release buffer head before return (bsc#1182613). - kabi: Fix breakage in NVMe driver (bsc#1181161). - kabi: Fix nvmet error log definitions (bsc#1181161). - kabi: nvme: fix fast_io_fail_tmo (bsc#1181161). - kABI: powerpc/pseries: Add shutdown() to vio_driver and vio_bus (bsc#1184209 ltc#190917). - kernel/smp: make csdlock timeout depend on boot parameter (bsc#1180846). - libbpf: Use SOCK_CLOEXEC when opening the netlink socket (bsc#1109837). - libnvdimm/label: Return -ENXIO for no slot in __blk_label_update (bsc#1185269). - libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels (bsc#1185269). - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (git-fixes). - locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (bsc#1185041). - macros.kernel-source: Use spec_install_pre for certificate installation (boo#1182672). - mmc: sdhci-of-esdhc: make sure delay chain locked for HS400 (git-fixes). - mmc: sdhci-of-esdhc: set the sd clock divisor value above 3 (git-fixes). - mm: fix memory_failure() handling of dax-namespace metadata (bsc#1185335). - net: bcmgenet: use hardware padding of runt frames (git-fixes). - net: cxgb4: fix return error value in t4_prep_fw (git-fixes). - net: hns3: clear VF down state bit before request link status (bsc#1104353). - net/mlx5: Fix PBMC register mapping (bsc#1103990). - net/mlx5: Fix placement of log_max_flow_counter (bsc#1046303 ). - netsec: ignore 'phy-mode' device property on ACPI systems (git-fixes). - nvme: add error log page slot definition (bsc#1181161). - nvme-fabrics: allow to queue requests for live queues (bsc#1181161). - nvme-fabrics: do not check state NVME_CTRL_NEW for request acceptance (bsc#1181161). - nvme-fabrics: reject I/O to offline device (bsc#1181161). - nvme: include admin_q sync with nvme_sync_queues (bsc#1181161). - nvme: introduce 'Command Aborted By host' status code (bsc#1181161). - nvme: introduce nvme_is_fabrics to check fabrics cmd (bsc#1181161). - nvme: introduce nvme_sync_io_queues (bsc#1181161). - nvme: make fabrics command run on a separate request queue (bsc#1181161). - nvme-pci: Sync queues on reset (bsc#1181161). - nvme: prevent warning triggered by nvme_stop_keep_alive (bsc#1181161). - nvme-rdma: avoid race between time out and tear down (bsc#1181161). - nvme-rdma: avoid repeated request completion (bsc#1181161). - nvme-rdma: avoid request double completion for concurrent nvme_rdma_timeout (bsc#1181161). - nvme-rdma: fix controller reset hang during traffic (bsc#1181161). - nvme-rdma: fix possible hang when failing to set io queues (bsc#1181161). - nvme-rdma: fix timeout handler (bsc#1181161). - nvme-rdma: serialize controller teardown sequences (bsc#1181161). - nvme: Restart request timers in resetting state (bsc#1181161). - nvmet: add error-log definitions (bsc#1181161). - nvmet: add error log support for fabrics-cmd (bsc#1181161). - nvme-tcp: avoid race between time out and tear down (bsc#1181161). - nvme-tcp: avoid repeated request completion (bsc#1181161). - nvme-tcp: avoid request double completion for concurrent nvme_tcp_timeout (bsc#1181161). - nvme-tcp: fix controller reset hang during traffic (bsc#1181161). - nvme-tcp: fix possible hang when failing to set io queues (bsc#1181161). - nvme-tcp: fix timeout handler (bsc#1181161). - nvme-tcp: serialize controller teardown sequences (bsc#1181161). - nvme: unlink head after removing last namespace (bsc#1181161). - ocfs2: fix a use after free on error (bsc#1184738). - ocfs2: fix deadlock between setattr and dio_end_io_write (bsc#1185197). - PCI: mobiveil: Add 8-bit and 16-bit CSR register accessors (). - PCI: mobiveil: Add callback function for interrupt initialization (). - PCI: mobiveil: Add callback function for link up check (). - PCI: mobiveil: Add configured inbound windows counter (). - PCI: mobiveil: Add Header Type field check (). - PCI: mobiveil: Add PCIe Gen4 RC driver for Layerscape SoCs (). - PCI: mobiveil: Add upper 32-bit CPU base address setup in outbound window (). - PCI: mobiveil: Add upper 32-bit PCI base address setup in inbound window (). - PCI: mobiveil: Allow mobiveil_host_init() to be used to re-init host (). - PCI: mobiveil: Clean-up program_{ib/ob}_windows() (). - PCI: mobiveil: Clear the control fields before updating it (). - PCI: mobiveil: Collect the interrupt related operations into a function (). - PCI: mobiveil: Fix csr_read()/write() build issue (). - PCI: mobiveil: Fix devfn check in mobiveil_pcie_valid_device() (). - PCI: mobiveil: Fix error return values (). - PCI: mobiveil: Fix infinite-loop in the INTx handling function (). - PCI: mobiveil: Fix INTx interrupt clearing in mobiveil_pcie_isr() (). - PCI: mobiveil: Fix PCI base address in MEM/IO outbound windows (). - PCI: mobiveil: Fix the Class Code field (). - PCI: mobiveil: Fix the CPU base address setup in inbound window (). - PCI: mobiveil: Fix the valid check for inbound and outbound windows (). - PCI: mobiveil: Initialize Primary/Secondary/Subordinate bus numbers (). - PCI: mobiveil: Introduce a new structure mobiveil_root_port (). - PCI: mobiveil: ls_pcie_g4: add Workaround for A-011451 (). - PCI: mobiveil: ls_pcie_g4: add Workaround for A-011577 (). - PCI: mobiveil: ls_pcie_g4: fix SError when accessing config space (). - PCI: mobiveil: Make some register updates more readable (). - PCI: mobiveil: Mask out hardcoded bits in inbound/outbound windows setup (). - PCI: mobiveil: Modularize the Mobiveil PCIe Host Bridge IP driver (). - PCI: mobiveil: Move IRQ chained handler setup out of DT parse (). - PCI: mobiveil: Move PCIe PIO enablement out of inbound window routine (). - PCI: mobiveil: Move the host initialization into a function (). - PCI: mobiveil: Move the link up waiting out of mobiveil_host_init() (). - PCI: mobiveil: Refactor the MEM/IO outbound window initialization (). - PCI: mobiveil: Reformat the code for readability (). - PCI: mobiveil: Remove an unnecessary return value check (). - PCI: mobiveil: Remove the flag MSI_FLAG_MULTI_PCI_MSI (). - PCI: mobiveil: Unify register accessors (). - PCI: mobiveil: Update the resource list traversal function (). - PCI: mobiveil: Use pci_parse_request_of_pci_ranges() (). - PCI: mobiveil: Use the 1st inbound window for MEM inbound transactions (). - PCI: mobiveil: Use WIN_NUM_0 explicitly for CFG outbound window (). - post.sh: Return an error when module update fails (bsc#1047233 bsc#1184388). - powerepc/book3s64/hash: Align start/end address correctly with bolt mapping (bsc#1184957). - powerpc/64s: Fix pte update for kernel memory on radix (bsc#1055117 git-fixes). - powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729). - powerpc/fadump: Mark fadump_calculate_reserve_size as __init (bsc#1065729). - powerpc/mm: Add cond_resched() while removing hpte mappings (bsc#1183289 ltc#191637). - powerpc/perf: Fix PMU constraint check for EBB events (bsc#1065729). - powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729). - powerpc/pseries: Add shutdown() to vio_driver and vio_bus (bsc#1184209 ltc#190917). - reiserfs: update reiserfs_xattrs_initialized() condition (bsc#1184737). - Revert 'rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)' This turned out to be a bad idea: the kernel-$flavor-devel package must be usable without kernel-$flavor, e.g. at the build of a KMP. And this change brought superfluous installation of kernel-preempt when a system had kernel-syms (bsc#1185113). - rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514) - rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063). - rpm/kernel-subpackage-build: Workaround broken bot (https://github.com/openSUSE/openSUSE-release-tools/issues/2439) - rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244) - rpm/mkspec: Use tilde instead of dot for version string with rc (bsc#1184650) - rtc: pcf2127: fix pcf2127_nvmem_read/write() returns (git-fixes). - sch_red: fix off-by-one checks in red_check_params() (bsc1056787). - scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647 ltc#191231). - scsi: libsas: docs: Remove notify_ha_event() (git-fixes). - scsi: lpfc: Copyright updates for 12.8.0.9 patches (bsc#1185472). - scsi: lpfc: Eliminate use of LPFC_DRIVER_NAME in lpfc_attr.c (bsc#1185472). - scsi: lpfc: Fix a bunch of kernel-doc issues (bsc#1185472). - scsi: lpfc: Fix a bunch of kernel-doc misdemeanours (bsc#1185472). - scsi: lpfc: Fix a bunch of misnamed functions (bsc#1185472). - scsi: lpfc: Fix a few incorrectly named functions (bsc#1185472). - scsi: lpfc: Fix a typo (bsc#1185472). - scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response (bsc#1185472). - scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (bsc#1185365). - scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode (bsc#1185472). - scsi: lpfc: Fix formatting and misspelling issues (bsc#1185472). - scsi: lpfc: Fix gcc -Wstringop-overread warning (bsc#1185472). - scsi: lpfc: Fix illegal memory access on Abort IOCBs (bsc#1183203). - scsi: lpfc: Fix incorrectly documented function lpfc_debugfs_commonxripools_data() (bsc#1185472). - scsi: lpfc: Fix incorrect naming of __lpfc_update_fcf_record() (bsc#1185472). - scsi: lpfc: Fix kernel-doc formatting issue (bsc#1185472). - scsi: lpfc: Fix lack of device removal on port swaps with PRLIs (bsc#1185472). - scsi: lpfc: Fix lpfc_hdw_queue attribute being ignored (bsc#1185472). - scsi: lpfc: Fix missing FDMI registrations after Mgmt Svc login (bsc#1185472). - scsi: lpfc: Fix NMI crash during rmmod due to circular hbalock dependency (bsc#1185472). - scsi: lpfc: Fix reference counting errors in lpfc_cmpl_els_rsp() (bsc#1185472). - scsi: lpfc: Fix rmmod crash due to bad ring pointers to abort_iotag (bsc#1185472). - scsi: lpfc: Fix silent memory allocation failure in lpfc_sli4_bsg_link_diag_test() (bsc#1185472). - scsi: lpfc: Fix some error codes in debugfs (bsc#1185472). - scsi: lpfc: Fix use-after-free on unused nodes after port swap (bsc#1185472). - scsi: lpfc: Fix various trivial errors in comments and log messages (bsc#1185472). - scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic (bsc#1185472). - scsi: lpfc: Standardize discovery object logging format (bsc#1185472). - scsi: lpfc: Update lpfc version to 12.8.0.9 (bsc#1185472). - scsi: qla2xxx: Add error counters to debugfs node (bsc#1185491). - scsi: qla2xxx: Add H:C:T info in the log message for fc ports (bsc#1185491). - scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() (bsc#1185491). - scsi: qla2xxx: Assign boolean values to a bool variable (bsc#1185491). - scsi: qla2xxx: Check kzalloc() return value (bsc#1185491). - scsi: qla2xxx: Consolidate zio threshold setting for both FCP NVMe (bsc#1185491). - scsi: qla2xxx: Constify struct qla_tgt_func_tmpl (bsc#1185491). - scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (bsc#1185491). - scsi: qla2xxx: Enable NVMe CONF (BIT_7) when enabling SLER (bsc#1185491). - scsi: qla2xxx: fc_remote_port_chkready() returns a SCSI result value (bsc#1185491). - scsi: qla2xxx: Fix a couple of misdocumented functions (bsc#1185491). - scsi: qla2xxx: Fix a couple of misnamed functions (bsc#1185491). - scsi: qla2xxx: Fix broken #endif placement (bsc#1185491). - scsi: qla2xxx: Fix crash in PCIe error handling (bsc#1185491). - scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() (bsc#1185491). - scsi: qla2xxx: Fix endianness annotations (bsc#1185491). - scsi: qla2xxx: Fix incorrectly named function qla8044_check_temp() (bsc#1185491). - scsi: qla2xxx: Fix IOPS drop seen in some adapters (bsc#1185491). - scsi: qla2xxx: Fix mailbox Ch erroneous error (bsc#1185491). - scsi: qla2xxx: Fix mailbox recovery during PCIe error (bsc#1185491). - scsi: qla2xxx: Fix RISC RESET completion polling (bsc#1185491). - scsi: qla2xxx: Fix some incorrect formatting/spelling issues (bsc#1185491). - scsi: qla2xxx: Fix some memory corruption (bsc#1185491). - scsi: qla2xxx: Fix stuck session (bsc#1185491). - scsi: qla2xxx: Fix use after free in bsg (bsc#1185491). - scsi: qla2xxx: Implementation to get and manage host, target stats and initiator port (bsc#1185491). - scsi: qla2xxx: Move some messages from debug to normal log level (bsc#1185491). - scsi: qla2xxx: Remove redundant NULL check (bsc#1185491). - scsi: qla2xxx: Remove unnecessary NULL check (bsc#1185491). - scsi: qla2xxx: Remove unneeded if-null-free check (bsc#1185491). - scsi: qla2xxx: Replace __qla2x00_marker()'s missing underscores (bsc#1185491). - scsi: qla2xxx: Reserve extra IRQ vectors (bsc#1185491). - scsi: qla2xxx: Reuse existing error handling path (bsc#1185491). - scsi: qla2xxx: Simplify if statement (bsc#1185491). - scsi: qla2xxx: Simplify qla8044_minidump_process_control() (bsc#1185491). - scsi: qla2xxx: Simplify the calculation of variables (bsc#1185491). - scsi: qla2xxx: Suppress Coverity complaints about dseg_r* (bsc#1185491). - scsi: qla2xxx: Update default AER debug mask (bsc#1185491). - scsi: qla2xxx: Update version to 10.02.00.105-k (bsc#1185491). - scsi: qla2xxx: Update version to 10.02.00.106-k (bsc#1185491). - scsi: qla2xxx: Use dma_pool_zalloc() (bsc#1185491). - scsi: qla2xxx: Wait for ABTS response on I/O timeouts for NVMe (bsc#1185491). - scsi: smartpqi: Correct driver removal with HBA disks (bsc#1178089). - scsi: smartpqi: Correct pqi_sas_smp_handler busy condition (bsc#1178089). - scsi: smartpqi: Update version to 1.2.16-012 (bsc#1178089). - smsc95xx: avoid memory leak in smsc95xx_bind (git-fixes). - smsc95xx: check return value of smsc95xx_reset (git-fixes). - spi: spi-fsl-dspi: Fix little endian access to PUSHR CMD and TXDATA (git-fixes). - stop_machine: mark helpers __always_inline (bsc#1087405 git-fixes). - struct usbip_device kABI fixup (git-fixes). - USB: cdc-acm: downgrade message to debug (git-fixes). - USB: CDC-ACM: fix poison/unpoison imbalance (bsc#1184984). - USB: cdc-acm: fix use-after-free after probe failure (git-fixes). - USB: cdc-acm: untangle a circular dependency between callback and softint (git-fixes). - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem (git-fixes). - USB: serial: ch341: add new Product ID (git-fixes). - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter (git-fixes). - USB: serial: cp210x: add some more GE USB IDs (git-fixes). - USB: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing (git-fixes). - usbip: add sysfs_lock to synchronize sysfs code paths (git-fixe). - usbip: fix vudc to check for stream socket (git-fixes). - usbip: stub-dev synchronize sysfs code paths (git-fixes). - usbip: synchronize event handler with sysfs code paths (git-fixes). - veth: Store queue_mapping independently of XDP prog presence (bsc#1109837). - video: hyperv_fb: Fix a double free in hvfb_probe (bsc#1175306, git-fixes). - x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access (bsc#1114648). - x86/insn: Add some Intel instructions to the opcode map (bsc#1184760). - x86/insn: Add some more Intel instructions to the opcode map (bsc#1184760). - x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall() (bsc#1114648). - x86/microcode: Check for offline CPUs before requesting new microcode (bsc#1114648). - x86/mm: Fix NX bit clearing issue in kernel_map_pages_in_pgd (bsc#1114648). - x86/reboot: Force all cpus to exit VMX root if VMX is supported (bsc#1114648). - xdp: fix xdp_return_frame() kernel BUG throw for page_pool memory model (bsc#1109837). - xhci: Improve detection of device initiated wake signal (git-fixes). - netfilter: Fix drop out of segments RST if tcp_be_liberal is set (bsc#1183947).
Family:unixClass:patch
Status:Reference(s):1012382
1031392
1043990
1046303
1047233
1051510
1055117
1055120
1056787
1061840
1065600
1065729
1071995
1082519
1085030
1087405
1090078
1094244
1097583
1097584
1097585
1097586
1097587
1097588
1098782
1101669
1101816
1102495
1103269
1103405
1103587
1103636
1103990
1104353
1104888
1105190
1105795
1106105
1106240
1106948
1107783
1107829
1107928
1107947
1108096
1108170
1108281
1108323
1108399
1108823
1109244
1109333
1109336
1109337
1109603
1109806
1109837
1109859
1109979
1109992
1110006
1110301
1110363
1110639
1110642
1110643
1110644
1110645
1110646
1110647
1110649
1110650
1111981
1114648
1118657
1118661
1120163
1133021
1142529
1149032
1151794
1152457
1152472
1152489
1153274
1154353
1154488
1154492
1155518
1156395
1159058
1160634
1166751
1167773
1169790
1171634
1171688
1172108
1172197
1172247
1172418
1172871
1172963
1173468
1173485
1173674
1173798
1173813
1173954
1174002
1174003
1174026
1174205
1174230
1174247
1174362
1174387
1174484
1174625
1174645
1174689
1174699
1174737
1174757
1174762
1174770
1174771
1174777
1174805
1174824
1174825
1174852
1174865
1174880
1174897
1174906
1174969
1175009
1175010
1175011
1175012
1175013
1175014
1175015
1175016
1175017
1175018
1175019
1175020
1175021
1175052
1175112
1175116
1175128
1175149
1175175
1175176
1175180
1175181
1175182
1175183
1175184
1175185
1175186
1175187
1175188
1175189
1175190
1175191
1175192
1175195
1175199
1175213
1175232
1175263
1175284
1175296
1175306
1175344
1175345
1175346
1175347
1175367
1175377
1175440
1175493
1175546
1175550
1175654
1175691
1175768
1175769
1175770
1175771
1175772
1175774
1175775
1175834
1175873
1176384
1176756
1176899
1177977
1178089
1180624
1180846
1181062
1181161
1182613
1182672
1183063
1183203
1183289
1183947
1184170
1184194
1184208
1184209
1184211
1184350
1184388
1184509
1184512
1184514
1184647
1184650
1184724
1184731
1184736
1184737
1184738
1184742
1184760
1184942
1184952
1184957
1184984
1185041
1185113
1185195
1185197
1185244
1185269
1185335
1185365
1185472
1185491
1185549
CVE-2008-4225
CVE-2008-4226
CVE-2008-4409
CVE-2009-0688
CVE-2010-0407
CVE-2010-2891
CVE-2010-4531
CVE-2011-1831
CVE-2011-1832
CVE-2011-1833
CVE-2011-1834
CVE-2011-1835
CVE-2011-1836
CVE-2011-1837
CVE-2012-0035
CVE-2012-1174
CVE-2012-1616
CVE-2012-5134
CVE-2013-4288
CVE-2014-2524
CVE-2014-3421
CVE-2014-3422
CVE-2014-3423
CVE-2014-3424
CVE-2014-6271
CVE-2014-7169
CVE-2014-7186
CVE-2014-7187
CVE-2018-14633
CVE-2018-17182
CVE-2019-14241
CVE-2020-0556
CVE-2020-14314
CVE-2020-14331
CVE-2020-14356
CVE-2020-15503
CVE-2020-15673
CVE-2020-15676
CVE-2020-15677
CVE-2020-15678
CVE-2020-15683
CVE-2020-15969
CVE-2020-16166
CVE-2020-36310
CVE-2020-36312
CVE-2020-36322
CVE-2021-28950
CVE-2021-29155
CVE-2021-29650
CVE-2021-3444
SUSE-SU-2018:3159-1
SUSE-SU-2019:3002-1
SUSE-SU-2020:0918-1
SUSE-SU-2020:2029-1
SUSE-SU-2020:2486-1
SUSE-SU-2020:3091-1
SUSE-SU-2021:1595-1
Platform(s):SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise High Availability 12
SUSE Linux Enterprise High Availability 12 SP1
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP3
SUSE Linux Enterprise High Availability 12 SP5
SUSE Linux Enterprise High Availability 15
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for Rasperry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Server for VMWare 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP5
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 5
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • java-1_6_0-openjdk-1.6.0.0_b27.1.12.7-0.2.1 is installed
  • OR java-1_6_0-openjdk-demo-1.6.0.0_b27.1.12.7-0.2.1 is installed
  • OR java-1_6_0-openjdk-devel-1.6.0.0_b27.1.12.7-0.2.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND libmspack0-0.0.20060920alpha-74.5.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND Package Information
  • bash-4.2-75 is installed
  • OR bash-doc-4.2-75 is installed
  • OR bash-lang-4.2-75 is installed
  • OR libreadline6-6.2-75 is installed
  • OR libreadline6-32bit-6.2-75 is installed
  • OR readline-doc-6.2-75 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND argyllcms-1.6.3-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • augeas-1.2.0-10 is installed
  • OR augeas-lenses-1.2.0-10 is installed
  • OR libaugeas0-1.2.0-10 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • augeas-1.2.0-15 is installed
  • OR augeas-lenses-1.2.0-15 is installed
  • OR libaugeas0-1.2.0-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • gpg2-2.0.24-9.3 is installed
  • OR gpg2-lang-2.0.24-9.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 is installed
  • AND python-PyYAML-3.10-15.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP1 is installed
  • AND Package Information
  • ctdb-4.2.4-26.2 is installed
  • OR samba-4.2.4-26.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP2 is installed
  • AND Package Information
  • libpcreposix0-8.39-5.1 is installed
  • OR pcre-8.39-5.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP3 is installed
  • AND ctdb-4.6.5+git.27.6afd48b1083-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP5 is installed
  • AND ctdb-4.10.5+git.129.35f7bb6e177-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 is installed
  • AND Package Information
  • cluster-md-kmp-default-4.12.14-25.22 is installed
  • OR dlm-kmp-default-4.12.14-25.22 is installed
  • OR gfs2-kmp-default-4.12.14-25.22 is installed
  • OR kernel-default-4.12.14-25.22 is installed
  • OR ocfs2-kmp-default-4.12.14-25.22 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND Package Information
  • apache-commons-beanutils-1.9.2-3.3 is installed
  • OR apache-commons-beanutils-javadoc-1.9.2-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_43-52_6-default-1-2.3 is installed
  • OR kgraft-patch-3_12_43-52_6-xen-1-2.3 is installed
  • OR kgraft-patch-SLE12_Update_5-1-2.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 12 is installed
  • AND python-PyYAML-3.10-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • cups154-1.5.4-2 is installed
  • OR cups154-client-1.5.4-2 is installed
  • OR cups154-filters-1.5.4-2 is installed
  • OR cups154-libs-1.5.4-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 12 is installed
  • AND Package Information
  • kernel-ec2-3.12.32-33.1 is installed
  • OR kernel-ec2-devel-3.12.32-33.1 is installed
  • OR kernel-ec2-extra-3.12.32-33.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 12 is installed
  • AND Package Information
  • apache2-mod_php5-5.5.14-36.1 is installed
  • OR php5-5.5.14-36.1 is installed
  • OR php5-bcmath-5.5.14-36.1 is installed
  • OR php5-bz2-5.5.14-36.1 is installed
  • OR php5-calendar-5.5.14-36.1 is installed
  • OR php5-ctype-5.5.14-36.1 is installed
  • OR php5-curl-5.5.14-36.1 is installed
  • OR php5-dba-5.5.14-36.1 is installed
  • OR php5-dom-5.5.14-36.1 is installed
  • OR php5-enchant-5.5.14-36.1 is installed
  • OR php5-exif-5.5.14-36.1 is installed
  • OR php5-fastcgi-5.5.14-36.1 is installed
  • OR php5-fileinfo-5.5.14-36.1 is installed
  • OR php5-fpm-5.5.14-36.1 is installed
  • OR php5-ftp-5.5.14-36.1 is installed
  • OR php5-gd-5.5.14-36.1 is installed
  • OR php5-gettext-5.5.14-36.1 is installed
  • OR php5-gmp-5.5.14-36.1 is installed
  • OR php5-iconv-5.5.14-36.1 is installed
  • OR php5-intl-5.5.14-36.1 is installed
  • OR php5-json-5.5.14-36.1 is installed
  • OR php5-ldap-5.5.14-36.1 is installed
  • OR php5-mbstring-5.5.14-36.1 is installed
  • OR php5-mcrypt-5.5.14-36.1 is installed
  • OR php5-mysql-5.5.14-36.1 is installed
  • OR php5-odbc-5.5.14-36.1 is installed
  • OR php5-opcache-5.5.14-36.1 is installed
  • OR php5-openssl-5.5.14-36.1 is installed
  • OR php5-pcntl-5.5.14-36.1 is installed
  • OR php5-pdo-5.5.14-36.1 is installed
  • OR php5-pear-5.5.14-36.1 is installed
  • OR php5-pgsql-5.5.14-36.1 is installed
  • OR php5-posix-5.5.14-36.1 is installed
  • OR php5-pspell-5.5.14-36.1 is installed
  • OR php5-shmop-5.5.14-36.1 is installed
  • OR php5-snmp-5.5.14-36.1 is installed
  • OR php5-soap-5.5.14-36.1 is installed
  • OR php5-sockets-5.5.14-36.1 is installed
  • OR php5-sqlite-5.5.14-36.1 is installed
  • OR php5-suhosin-5.5.14-36.1 is installed
  • OR php5-sysvmsg-5.5.14-36.1 is installed
  • OR php5-sysvsem-5.5.14-36.1 is installed
  • OR php5-sysvshm-5.5.14-36.1 is installed
  • OR php5-tokenizer-5.5.14-36.1 is installed
  • OR php5-wddx-5.5.14-36.1 is installed
  • OR php5-xmlreader-5.5.14-36.1 is installed
  • OR php5-xmlrpc-5.5.14-36.1 is installed
  • OR php5-xmlwriter-5.5.14-36.1 is installed
  • OR php5-xsl-5.5.14-36.1 is installed
  • OR php5-zip-5.5.14-36.1 is installed
  • OR php5-zlib-5.5.14-36.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND krb5-doc-1.6.3-133.49.54.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND Package Information
  • PackageKit-0.3.14-2.30.11 is installed
  • OR PackageKit-lang-0.3.14-2.30.11 is installed
  • OR hal-0.5.12-23.76.1 is installed
  • OR hal-32bit-0.5.12-23.76.1 is installed
  • OR hal-doc-0.5.12-23.76.1 is installed
  • OR hal-x86-0.5.12-23.76.1 is installed
  • OR libpackagekit-glib10-0.3.14-2.30.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • MozillaFirefox-31.1.0esr-1 is installed
  • OR MozillaFirefox-translations-31.1.0esr-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • libsndfile-1.0.25-25.1 is installed
  • OR libsndfile1-1.0.25-25.1 is installed
  • OR libsndfile1-32bit-1.0.25-25.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libXrender1-0.9.8-3 is installed
  • OR libXrender1-32bit-0.9.8-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND apache-commons-httpclient-3.1-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • dhcp-4.3.3-10.14 is installed
  • OR dhcp-client-4.3.3-10.14 is installed
  • OR dhcp-relay-4.3.3-10.14 is installed
  • OR dhcp-server-4.3.3-10.14 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND Package Information
  • kernel-docs-4.12.14-122.71.1 is installed
  • OR kernel-obs-build-4.12.14-122.71.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12-LTSS is installed
  • AND Package Information
  • libmysqlclient-devel-10.0.26-20.10.2 is installed
  • OR libmysqlclient18-10.0.26-20.10.2 is installed
  • OR libmysqlclient18-32bit-10.0.26-20.10.2 is installed
  • OR libmysqlclient_r18-10.0.26-20.10.2 is installed
  • OR libmysqld-devel-10.0.26-20.10.2 is installed
  • OR libmysqld18-10.0.26-20.10.2 is installed
  • OR mariadb-10.0.26-20.10.2 is installed
  • OR mariadb-client-10.0.26-20.10.2 is installed
  • OR mariadb-errormessages-10.0.26-20.10.2 is installed
  • OR mariadb-tools-10.0.26-20.10.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • libzip-0.11.1-13.3 is installed
  • OR libzip2-0.11.1-13.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • libxml2-2.7.6-0.34.1 is installed
  • OR libxml2-devel-2.7.6-0.34.1 is installed
  • OR libxml2-devel-32bit-2.7.6-0.34.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND Package Information
  • libqt4-devel-4.8.6-4 is installed
  • OR libqt4-devel-doc-4.8.6-4 is installed
  • OR libqt4-devel-doc-data-4.8.6-4 is installed
  • OR libqt4-linguist-4.8.6-4 is installed
  • OR libqt4-private-headers-devel-4.8.6-4 is installed
  • OR libqt4-sql-postgresql-4.8.6-4 is installed
  • OR libqt4-sql-postgresql-32bit-4.8.6-4 is installed
  • OR libqt4-sql-unixODBC-4.8.6-4 is installed
  • OR libqt4-sql-unixODBC-32bit-4.8.6-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND MozillaFirefox-devel-45.4.0esr-81 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND LibVNCServer-devel-0.9.9-16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-8.2 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-8.2 is installed
  • OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-30.2 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-30.2 is installed
  • OR libMagickCore-6_Q16-1-32bit-6.8.8.1-30.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • MozillaThunderbird-78.4.0-3.99 is installed
  • OR MozillaThunderbird-translations-common-78.4.0-3.99 is installed
  • OR MozillaThunderbird-translations-other-78.4.0-3.99 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
  • AND Package Information
  • libraw-0.18.9-3.11 is installed
  • OR libraw-devel-0.18.9-3.11 is installed
  • OR libraw16-0.18.9-3.11 is installed
    • BACK