Oval Definition:	oval:org.opensuse.security:def:51620
Revision Date: 2021-07-27 Version: 1 Title: Security update for the Linux Kernel (Live Patch 39 for SLE 12 SP3) (Important) Description: This update for the Linux Kernel 4.4.180-94_144 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116) - CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050) Family: unix Class: patch Status: Reference(s): 1047238 1050911 1051510 1054914 1055117 1056686 1060662 1061840 1061843 1064597 1064701 1065600 1065729 1066369 1071009 1071306 1071995 1078248 1082555 1085030 1085536 1085539 1087092 1090734 1091171 1093205 1102097 1103678 1104902 1104967 1106061 1106284 1106434 1108382 1109158 1112894 1112899 1112902 1112903 1112905 1112906 1112907 1113722 1114279 1114542 1115375 1118689 1119086 1120876 1120902 1120937 1123034 1123105 1123156 1124370 1125330 1127988 1129424 1129519 1129664 1131107 1131304 1131565 1132091 1134291 1134881 1134882 1135219 1135642 1135897 1136261 1137001 1137069 1137865 1137884 1137959 1138539 1139020 1139021 1139101 1139500 1140012 1140155 1140426 1140487 1141013 1141450 1141543 1141554 1141780 1141782 1141783 1141784 1141785 1141786 1141787 1141789 1142019 1142076 1142109 1142117 1142118 1142119 1142496 1142541 1142635 1142685 1142701 1143300 1143466 1143765 1143841 1143843 1144123 1144333 1144474 1144518 1144718 1144813 1144880 1144886 1144912 1144920 1144979 1145010 1145051 1145059 1145134 1145189 1145235 1145300 1145302 1145388 1145389 1145390 1145391 1145392 1145393 1145394 1145395 1145396 1145397 1145408 1145409 1145661 1145678 1145687 1145920 1145922 1145934 1145937 1145940 1145941 1145942 1146042 1146074 1146084 1146163 1146285 1146346 1146351 1146352 1146361 1146376 1146378 1146381 1146391 1146399 1146413 1146425 1146512 1146514 1146516 1146519 1146524 1146526 1146529 1146531 1146540 1146543 1146547 1146550 1146575 1146589 1146664 1146678 1146938 1148031 1148032 1148033 1148034 1148035 1148093 1148133 1148192 1148196 1148198 1148202 1148303 1148363 1148379 1148394 1148527 1148574 1148616 1148617 1148619 1148712 1148859 1148868 1149053 1149083 1149104 1149105 1149106 1149197 1149214 1149224 1149313 1149325 1149376 1149413 1149418 1149424 1149446 1149522 1149527 1149539 1149552 1149555 1149591 1149602 1149612 1149626 1149651 1149652 1149713 1149940 1149976 1150025 1150033 1150112 1150381 1150423 1150562 1150727 1150860 1150861 1150933 1151350 1151610 1151667 1151680 1151891 1151955 1152024 1152025 1152026 1152161 1152325 1152457 1152460 1152466 1152497 1152972 1152974 1152975 1154448 1154456 1154458 1154461 1155945 1161066 1163018 1165776 1166066 1166240 1170940 1172760 1174955 1175155 1175465 1175574 1176430 1177155 1177211 1177480 1187052 1188117 1188257 CVE-2004-0801 CVE-2008-3825 CVE-2009-1384 CVE-2009-3297 CVE-2010-4267 CVE-2011-0421 CVE-2011-0541 CVE-2011-2697 CVE-2011-2722 CVE-2011-3630 CVE-2011-3631 CVE-2011-3632 CVE-2012-1162 CVE-2012-1163 CVE-2013-4325 CVE-2013-6402 CVE-2013-6427 CVE-2015-2331 CVE-2015-3202 CVE-2017-18551 CVE-2017-18595 CVE-2018-12207 CVE-2018-18335 CVE-2018-18356 CVE-2018-18509 CVE-2018-20976 CVE-2018-21008 CVE-2019-11023 CVE-2019-11135 CVE-2019-12450 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14821 CVE-2019-14835 CVE-2019-15030 CVE-2019-15031 CVE-2019-15090 CVE-2019-15098 CVE-2019-15117 CVE-2019-15118 CVE-2019-15211 CVE-2019-15212 CVE-2019-15214 CVE-2019-15215 CVE-2019-15216 CVE-2019-15217 CVE-2019-15218 CVE-2019-15219 CVE-2019-15220 CVE-2019-15221 CVE-2019-15222 CVE-2019-15239 CVE-2019-15290 CVE-2019-15291 CVE-2019-15292 CVE-2019-15538 CVE-2019-15666 CVE-2019-15902 CVE-2019-15917 CVE-2019-15919 CVE-2019-15920 CVE-2019-15921 CVE-2019-15924 CVE-2019-15926 CVE-2019-15927 CVE-2019-18420 CVE-2019-18421 CVE-2019-18424 CVE-2019-18425 CVE-2019-20382 CVE-2019-2745 CVE-2019-2762 CVE-2019-2766 CVE-2019-2769 CVE-2019-2786 CVE-2019-2816 CVE-2019-2842 CVE-2019-5785 CVE-2019-6778 CVE-2019-7317 CVE-2019-9456 CVE-2019-9506 CVE-2020-0034 CVE-2020-15708 CVE-2020-1711 CVE-2020-17489 CVE-2020-1983 CVE-2020-25637 CVE-2020-26116 CVE-2020-36385 CVE-2020-7039 CVE-2020-8608 CVE-2021-22555 CVE-2021-33909 SUSE-SU-2019:0469-1 SUSE-SU-2019:1267-1 SUSE-SU-2019:1594-1 SUSE-SU-2019:2021-1 SUSE-SU-2019:2651-1 SUSE-SU-2019:2960-1 SUSE-SU-2020:1297-2 SUSE-SU-2020:1523-1 SUSE-SU-2020:3037-1 SUSE-SU-2020:3115-1 SUSE-SU-2020:3132-1 SUSE-SU-2021:2538-1 Platform(s): openSUSE Leap 15.0 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE OpenStack Cloud 6-LTSS SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND xf86-video-intel-2.99.917+git781.c8990575-lp150.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libecpg6-9.1.15-0.3 is installed OR libpq5-9.1.15-0.3 is installed OR libpq5-32bit-9.1.15-0.3 is installed OR postgresql91-9.1.15-0.3 is installed OR postgresql91-docs-9.1.15-0.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND icedtea-web-1.5.3-0.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information pam_krb5-2.4.4-4 is installed OR pam_krb5-32bit-2.4.4-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND libzip2-0.11.1-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information fuse-2.9.3-5 is installed OR libfuse2-2.9.3-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information gd-2.1.0-23 is installed OR gd-32bit-2.1.0-23 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed AND Package Information glib2-2.54.3-4.15 is installed OR glib2-devel-32bit-2.54.3-4.15 is installed OR glib2-tools-32bit-2.54.3-4.15 is installed OR libgthread-2_0-0-32bit-2.54.3-4.15 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP2 is installed AND Package Information libvpx-1.6.1-6.6 is installed OR vpx-tools-1.6.1-6.6 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information graphviz-addons-2.40.1-6.3 is installed OR graphviz-doc-2.40.1-6.3 is installed OR graphviz-gnome-2.40.1-6.3 is installed OR graphviz-guile-2.40.1-6.3 is installed OR graphviz-gvedit-2.40.1-6.3 is installed OR graphviz-java-2.40.1-6.3 is installed OR graphviz-lua-2.40.1-6.3 is installed OR graphviz-php-2.40.1-6.3 is installed OR graphviz-ruby-2.40.1-6.3 is installed OR graphviz-smyrna-2.40.1-6.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information kernel-azure-4.12.14-5.41 is installed OR kernel-azure-base-4.12.14-5.41 is installed OR kernel-azure-devel-4.12.14-5.41 is installed OR kernel-devel-azure-4.12.14-5.41 is installed OR kernel-source-azure-4.12.14-5.41 is installed OR kernel-syms-azure-4.12.14-5.41 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-2.7.17-7.44 is installed OR python-base-2.7.17-7.44 is installed OR python-curses-2.7.17-7.44 is installed OR python-devel-2.7.17-7.44 is installed OR python-gdbm-2.7.17-7.44 is installed OR python-xml-2.7.17-7.44 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information xen-4.10.4_06-3.25 is installed OR xen-devel-4.10.4_06-3.25 is installed OR xen-tools-4.10.4_06-3.25 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information libvirt-5.1.0-8.24 is installed OR libvirt-admin-5.1.0-8.24 is installed OR libvirt-bash-completion-5.1.0-8.24 is installed OR libvirt-client-5.1.0-8.24 is installed OR libvirt-daemon-5.1.0-8.24 is installed OR libvirt-daemon-config-network-5.1.0-8.24 is installed OR libvirt-daemon-config-nwfilter-5.1.0-8.24 is installed OR libvirt-daemon-driver-interface-5.1.0-8.24 is installed OR libvirt-daemon-driver-libxl-5.1.0-8.24 is installed OR libvirt-daemon-driver-lxc-5.1.0-8.24 is installed OR libvirt-daemon-driver-network-5.1.0-8.24 is installed OR libvirt-daemon-driver-nodedev-5.1.0-8.24 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-8.24 is installed OR libvirt-daemon-driver-qemu-5.1.0-8.24 is installed OR libvirt-daemon-driver-secret-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-core-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-8.24 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-8.24 is installed OR libvirt-daemon-hooks-5.1.0-8.24 is installed OR libvirt-daemon-lxc-5.1.0-8.24 is installed OR libvirt-daemon-qemu-5.1.0-8.24 is installed OR libvirt-daemon-xen-5.1.0-8.24 is installed OR libvirt-devel-5.1.0-8.24 is installed OR libvirt-doc-5.1.0-8.24 is installed OR libvirt-lock-sanlock-5.1.0-8.24 is installed OR libvirt-nss-5.1.0-8.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cvs-1.12.12-181 is installed OR cvs-doc-1.12.12-181 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information libzypp-15.25.17-46.22 is installed OR zypper-1.12.59-46.10 is installed OR zypper-log-1.12.59-46.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information cyrus-sasl-2.1.26-7 is installed OR cyrus-sasl-32bit-2.1.26-7 is installed OR cyrus-sasl-crammd5-2.1.26-7 is installed OR cyrus-sasl-crammd5-32bit-2.1.26-7 is installed OR cyrus-sasl-digestmd5-2.1.26-7 is installed OR cyrus-sasl-gssapi-2.1.26-7 is installed OR cyrus-sasl-gssapi-32bit-2.1.26-7 is installed OR cyrus-sasl-otp-2.1.26-7 is installed OR cyrus-sasl-otp-32bit-2.1.26-7 is installed OR cyrus-sasl-plain-2.1.26-7 is installed OR cyrus-sasl-plain-32bit-2.1.26-7 is installed OR cyrus-sasl-saslauthd-2.1.26-7 is installed OR cyrus-sasl-sqlauxprop-2.1.26-7 is installed OR cyrus-sasl-sqlauxprop-32bit-2.1.26-7 is installed OR libsasl2-3-2.1.26-7 is installed OR libsasl2-3-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information glibc-2.22-62.13 is installed OR glibc-32bit-2.22-62.13 is installed OR glibc-devel-2.22-62.13 is installed OR glibc-devel-32bit-2.22-62.13 is installed OR glibc-html-2.22-62.13 is installed OR glibc-i18ndata-2.22-62.13 is installed OR glibc-info-2.22-62.13 is installed OR glibc-locale-2.22-62.13 is installed OR glibc-locale-32bit-2.22-62.13 is installed OR glibc-profile-2.22-62.13 is installed OR glibc-profile-32bit-2.22-62.13 is installed OR nscd-2.22-62.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information xen-4.7.6_02-43.36 is installed OR xen-doc-html-4.7.6_02-43.36 is installed OR xen-libs-4.7.6_02-43.36 is installed OR xen-libs-32bit-4.7.6_02-43.36 is installed OR xen-tools-4.7.6_02-43.36 is installed OR xen-tools-domU-4.7.6_02-43.36 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information openslp-2.0.0-18.15 is installed OR openslp-32bit-2.0.0-18.15 is installed OR openslp-server-2.0.0-18.15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information libgcrypt20-1.6.1-16.39 is installed OR libgcrypt20-32bit-1.6.1-16.39 is installed OR libgcrypt20-hmac-1.6.1-16.39 is installed OR libgcrypt20-hmac-32bit-1.6.1-16.39 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information java-1_7_0-openjdk-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-demo-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-devel-1.7.0.241-43.30 is installed OR java-1_7_0-openjdk-headless-1.7.0.241-43.30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information libpython3_4m1_0-3.4.6-25.29 is installed OR python3-3.4.6-25.29 is installed OR python3-base-3.4.6-25.29 is installed OR python3-curses-3.4.6-25.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_175-94_79-default-5-2 is installed OR kgraft-patch-SLE12-SP3_Update_23-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND gd-2.1.0-24.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information MozillaFirefox-52.9.0esr-109.38 is installed OR MozillaFirefox-translations-52.9.0esr-109.38 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND kgraft-patch-4_4_180-94_144-default-4-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information qemu-2.11.2-9.36 is installed OR qemu-block-curl-2.11.2-9.36 is installed OR qemu-block-iscsi-2.11.2-9.36 is installed OR qemu-block-rbd-2.11.2-9.36 is installed OR qemu-block-ssh-2.11.2-9.36 is installed OR qemu-guest-agent-2.11.2-9.36 is installed OR qemu-ipxe-1.0.0+-9.36 is installed OR qemu-kvm-2.11.2-9.36 is installed OR qemu-lang-2.11.2-9.36 is installed OR qemu-ppc-2.11.2-9.36 is installed OR qemu-seabios-1.11.0-9.36 is installed OR qemu-sgabios-8-9.36 is installed OR qemu-tools-2.11.2-9.36 is installed OR qemu-vgabios-1.11.0-9.36 is installed OR qemu-x86-2.11.2-9.36 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 is installed AND Package Information MozillaThunderbird-60.5.1-3.24 is installed OR MozillaThunderbird-translations-common-60.5.1-3.24 is installed OR MozillaThunderbird-translations-other-60.5.1-3.24 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND Package Information gnome-shell-3.34.5-3.13 is installed OR gnome-shell-calendar-3.34.5-3.13 is installed Definition Synopsis SUSE OpenStack Cloud 6-LTSS is installed AND python-cryptography-2.1.4-3.15 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND slf4j-1.7.12-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-rack-1.6.11-3.3 is installed OR rubygem-rack-1.6.11-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 9 is installed AND Package Information mariadb-10.2.29-3.22 is installed OR mariadb-galera-10.2.29-3.22 is installed
BACK