| Revision Date: | 2020-12-07 | Version: | 1 |
| Title: | Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP3) (Important) |
| Description: |
This update for the Linux Kernel 4.4.180-94_116 fixes several issues.
The following security issues were fixed:
- CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622). - CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700). - CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783).
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1013721
1013732
1051510
1071995
1084631
1086186
1086227
1086228
1088047
1090519
1090840
1094898
1098633
1098735
1102604
1103628
1103990
1103991
1103992
1105279
1106383
1106878
1107592
1107594
1108404
1109837
1111666
1112374
1114592
1114685
1115758
1115774
1115795
1119113
1119532
1120423
1125703
1127838
1128902
1130836
1131645
1132390
1133401
1133738
1134303
1134395
1135254
1135556
1135642
1135897
1136161
1136264
1136343
1136935
1137625
1137728
1138879
1139712
1139751
1139771
1139865
1140133
1140228
1140328
1140405
1140424
1140428
1140454
1140463
1140575
1140577
1140637
1140658
1140715
1140719
1140726
1140727
1140728
1140814
1140887
1140888
1140889
1140891
1140893
1140948
1140954
1140955
1140956
1140957
1140958
1140959
1140960
1140961
1140962
1140964
1140971
1140972
1140992
1141897
1142649
1142654
1148517
1149145
1150711
1155690
1156202
1159913
1159922
1159923
1159924
1159927
1160682
1165631
1173274
1173538
1174186
1174247
1178622
1178700
1178783
CVE-2008-1420
CVE-2008-3825
CVE-2009-0688
CVE-2009-1384
CVE-2009-3379
CVE-2011-3172
CVE-2012-0444
CVE-2012-4453
CVE-2016-9800
CVE-2016-9801
CVE-2018-1000667
CVE-2018-10016
CVE-2018-10254
CVE-2018-10316
CVE-2018-12617
CVE-2018-16382
CVE-2018-16517
CVE-2018-16999
CVE-2018-19214
CVE-2018-19215
CVE-2018-19216
CVE-2018-20836
CVE-2018-8881
CVE-2018-8882
CVE-2018-8883
CVE-2019-0804
CVE-2019-10126
CVE-2019-10638
CVE-2019-10639
CVE-2019-11045
CVE-2019-11046
CVE-2019-11047
CVE-2019-11050
CVE-2019-11599
CVE-2019-13233
CVE-2019-14250
CVE-2019-15847
CVE-2019-20372
CVE-2019-5108
CVE-2020-14331
CVE-2020-14422
CVE-2020-15780
CVE-2020-1749
CVE-2020-25668
CVE-2020-25705
CVE-2020-8694
SUSE-SU-2018:2679-1
SUSE-SU-2018:4189-1
SUSE-SU-2019:0603-1
SUSE-SU-2019:1854-1
SUSE-SU-2019:3061-1
SUSE-SU-2020:0101-1
SUSE-SU-2020:1171-1
SUSE-SU-2020:1822-1
SUSE-SU-2020:1843-1
SUSE-SU-2020:2517-1
|
| Platform(s): | openSUSE Leap 15.0
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Development Tools 15 SP1
SUSE Linux Enterprise Module for Development Tools 15 SP2
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND Package Information
libminizip1-1.2.11-lp150.1 is installed
OR libz1-1.2.11-lp150.1 is installed
OR libz1-32bit-1.2.11-lp150.1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed
AND Package Information
MozillaFirefox-17.0.7esr-0.8 is installed
OR MozillaFirefox-branding-SLED-7-0.12 is installed
OR MozillaFirefox-translations-17.0.7esr-0.8 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP4 is installed
AND Package Information
bind-9.9.6P1-0.12 is installed
OR bind-libs-9.9.6P1-0.12 is installed
OR bind-libs-32bit-9.9.6P1-0.12 is installed
OR bind-utils-9.9.6P1-0.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 is installed
AND Package Information
cyrus-sasl-2.1.26-7 is installed
OR cyrus-sasl-32bit-2.1.26-7 is installed
OR cyrus-sasl-crammd5-2.1.26-7 is installed
OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed
OR cyrus-sasl-digestmd5-2.1.26-7 is installed
OR cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed
OR cyrus-sasl-gssapi-2.1.26-7 is installed
OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed
OR cyrus-sasl-plain-2.1.26-7 is installed
OR cyrus-sasl-plain-32bit-2.1.26-7 is installed
OR cyrus-sasl-saslauthd-2.1.26-7 is installed
OR libsasl2-3-2.1.26-7 is installed
OR libsasl2-3-32bit-2.1.26-7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP1 is installed
AND dracut-037-66 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP2 is installed
AND iputils-s20121221-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND groff-1.22.2-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP4 is installed
AND Package Information
coreutils-8.25-13.7 is installed
OR coreutils-lang-8.25-13.7 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
AND Package Information
php7-7.2.5-4.49 is installed
OR php7-embed-7.2.5-4.49 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP1 is installed
AND Package Information
cpp9-9.2.1+r275327-1.3 is installed
OR gcc9-9.2.1+r275327-1.3 is installed
OR gcc9-32bit-9.2.1+r275327-1.3 is installed
OR gcc9-ada-9.2.1+r275327-1.3 is installed
OR gcc9-ada-32bit-9.2.1+r275327-1.3 is installed
OR gcc9-c++-9.2.1+r275327-1.3 is installed
OR gcc9-c++-32bit-9.2.1+r275327-1.3 is installed
OR gcc9-fortran-9.2.1+r275327-1.3 is installed
OR gcc9-fortran-32bit-9.2.1+r275327-1.3 is installed
OR gcc9-go-9.2.1+r275327-1.3 is installed
OR gcc9-go-32bit-9.2.1+r275327-1.3 is installed
OR gcc9-info-9.2.1+r275327-1.3 is installed
OR gcc9-locale-9.2.1+r275327-1.3 is installed
OR libada9-9.2.1+r275327-1.3 is installed
OR libada9-32bit-9.2.1+r275327-1.3 is installed
OR libatomic1-32bit-9.2.1+r275327-1.3 is installed
OR libstdc++6-devel-gcc9-9.2.1+r275327-1.3 is installed
OR libstdc++6-devel-gcc9-32bit-9.2.1+r275327-1.3 is installed
OR libstdc++6-pp-gcc9-9.2.1+r275327-1.3 is installed
OR libstdc++6-pp-gcc9-32bit-9.2.1+r275327-1.3 is installed
OR libubsan1-32bit-9.2.1+r275327-1.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Development Tools 15 SP2 is installed
AND nasm-2.14.02-3.4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
AND Package Information
kernel-default-4.12.14-197.10 is installed
OR kernel-default-livepatch-4.12.14-197.10 is installed
OR kernel-default-livepatch-devel-4.12.14-197.10 is installed
OR kernel-livepatch-4_12_14-197_10-default-1-3.3 is installed
OR kernel-livepatch-SLE15-SP1_Update_3-1-3.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Public Cloud 15 is installed
AND python-azure-agent-2.2.36-7.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Module for Server Applications 15 is installed
AND Package Information
qemu-2.11.2-9.9 is installed
OR qemu-arm-2.11.2-9.9 is installed
OR qemu-block-curl-2.11.2-9.9 is installed
OR qemu-block-iscsi-2.11.2-9.9 is installed
OR qemu-block-rbd-2.11.2-9.9 is installed
OR qemu-block-ssh-2.11.2-9.9 is installed
OR qemu-guest-agent-2.11.2-9.9 is installed
OR qemu-ipxe-1.0.0-9.9 is installed
OR qemu-kvm-2.11.2-9.9 is installed
OR qemu-lang-2.11.2-9.9 is installed
OR qemu-ppc-2.11.2-9.9 is installed
OR qemu-s390-2.11.2-9.9 is installed
OR qemu-seabios-1.11.0-9.9 is installed
OR qemu-sgabios-8-9.9 is installed
OR qemu-vgabios-1.11.0-9.9 is installed
OR qemu-x86-2.11.2-9.9 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
apache2-2.4.16-5 is installed
OR apache2-doc-2.4.16-5 is installed
OR apache2-example-pages-2.4.16-5 is installed
OR apache2-prefork-2.4.16-5 is installed
OR apache2-utils-2.4.16-5 is installed
OR apache2-worker-2.4.16-5 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_48-default-2-2 is installed
OR kgraft-patch-3_12_74-60_64_48-xen-2-2 is installed
OR kgraft-patch-SLE12-SP1_Update_17-2-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
gnome-shell-3.20.4-70 is installed
OR gnome-shell-browser-plugin-3.20.4-70 is installed
OR gnome-shell-lang-3.20.4-70 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND Package Information
java-1_7_0-openjdk-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
kgraft-patch-4_4_121-92_73-default-6-2 is installed
OR kgraft-patch-SLE12-SP2_Update_21-6-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
java-1_7_0-openjdk-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed
OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND ant-1.9.4-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
AND Package Information
MozillaFirefox-60.8.0-109.83 is installed
OR MozillaFirefox-translations-common-60.8.0-109.83 is installed
OR libfreebl3-3.44.1-58.28 is installed
OR libfreebl3-32bit-3.44.1-58.28 is installed
OR libfreebl3-hmac-3.44.1-58.28 is installed
OR libfreebl3-hmac-32bit-3.44.1-58.28 is installed
OR libsoftokn3-3.44.1-58.28 is installed
OR libsoftokn3-32bit-3.44.1-58.28 is installed
OR libsoftokn3-hmac-3.44.1-58.28 is installed
OR libsoftokn3-hmac-32bit-3.44.1-58.28 is installed
OR mozilla-nss-3.44.1-58.28 is installed
OR mozilla-nss-32bit-3.44.1-58.28 is installed
OR mozilla-nss-certs-3.44.1-58.28 is installed
OR mozilla-nss-certs-32bit-3.44.1-58.28 is installed
OR mozilla-nss-sysinit-3.44.1-58.28 is installed
OR mozilla-nss-sysinit-32bit-3.44.1-58.28 is installed
OR mozilla-nss-tools-3.44.1-58.28 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kernel-default-4.4.180-94.107 is installed
OR kernel-default-base-4.4.180-94.107 is installed
OR kernel-default-devel-4.4.180-94.107 is installed
OR kernel-default-kgraft-4.4.180-94.107 is installed
OR kernel-default-man-4.4.180-94.107 is installed
OR kernel-devel-4.4.180-94.107 is installed
OR kernel-macros-4.4.180-94.107 is installed
OR kernel-source-4.4.180-94.107 is installed
OR kernel-syms-4.4.180-94.107 is installed
OR kgraft-patch-4_4_180-94_107-default-1-4.3 is installed
OR kgraft-patch-SLE12-SP3_Update_29-1-4.3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND Package Information
libblkid1-2.29.2-3.12 is installed
OR libblkid1-32bit-2.29.2-3.12 is installed
OR libfdisk1-2.29.2-3.12 is installed
OR libmount1-2.29.2-3.12 is installed
OR libmount1-32bit-2.29.2-3.12 is installed
OR libsmartcols1-2.29.2-3.12 is installed
OR libuuid1-2.29.2-3.12 is installed
OR libuuid1-32bit-2.29.2-3.12 is installed
OR python-libmount-2.29.2-3.12 is installed
OR util-linux-2.29.2-3.12 is installed
OR util-linux-lang-2.29.2-3.12 is installed
OR util-linux-systemd-2.29.2-3.12 is installed
OR uuidd-2.29.2-3.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND busybox-1.21.1-3 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 15-LTSS is installed
AND nginx-1.16.1-3.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed
AND kgraft-patch-4_4_180-94_116-default-6-2.2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server for SAP Applications 15 is installed
AND Package Information
libpython3_6m1_0-3.6.10-3.56 is installed
OR python3-3.6.10-3.56 is installed
OR python3-base-3.6.10-3.56 is installed
OR python3-curses-3.6.10-3.56 is installed
OR python3-dbm-3.6.10-3.56 is installed
OR python3-devel-3.6.10-3.56 is installed
OR python3-idle-3.6.10-3.56 is installed
OR python3-tk-3.6.10-3.56 is installed
OR python3-tools-3.6.10-3.56 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Workstation Extension 15 is installed
AND Package Information
bluez-5.48-5.8 is installed
OR bluez-cups-5.48-5.8 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND Package Information
openstack-heat-5.0.2~a0~dev9-1 is installed
OR openstack-heat-api-5.0.2~a0~dev9-1 is installed
OR openstack-heat-api-cfn-5.0.2~a0~dev9-1 is installed
OR openstack-heat-api-cloudwatch-5.0.2~a0~dev9-1 is installed
OR openstack-heat-engine-5.0.2~a0~dev9-1 is installed
OR openstack-heat-plugin-heat_docker-5.0.2~a0~dev9-1 is installed
OR python-heat-5.0.2~a0~dev9-1 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND yast2-smt-3.0.14-17.3 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
mariadb-10.2.22-4.11 is installed
OR mariadb-client-10.2.22-4.11 is installed
OR mariadb-errormessages-10.2.22-4.11 is installed
OR mariadb-galera-10.2.22-4.11 is installed
OR mariadb-tools-10.2.22-4.11 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND squid-3.5.21-26.17 is installed
|