Oval Definition:	oval:org.opensuse.security:def:51662
Revision Date: 2021-09-23 Version: 1 Title: Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important) Description: This update for the Linux Kernel 4.4.180-94_147 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1051510 1065600 1065729 1071995 1081947 1083647 1085030 1091396 1105010 1106163 1109911 1111666 1112438 1113956 1114279 1118338 1120386 1125689 1128106 1133031 1134616 1134883 1135210 1135902 1136540 1136778 1137325 1138425 1138459 1138464 1138534 1140402 1141132 1142685 1143794 1144087 1145051 1145929 1146182 1146184 1148868 1157424 1158983 1159037 1159198 1159199 1161561 1161951 1162171 1162936 1162937 1163178 1163403 1163897 1164284 1164777 1164780 1164893 1165019 1165182 1165185 1165211 1165548 1165823 1165949 1166780 1166860 1166861 1166862 1166864 1166866 1166867 1166868 1166870 1166940 1166982 1167005 1167216 1167288 1167290 1167316 1167421 1167423 1167627 1167629 1168075 1168202 1168273 1168276 1168295 1168367 1168424 1168443 1168486 1168552 1168554 1168760 1168762 1168763 1168764 1168765 1168829 1168854 1168881 1168884 1168952 1169013 1169057 1169307 1169308 1169390 1169514 1169625 1172177 1172182 1172184 1172186 1173351 1175193 1175194 1189278 1189420 964336 CVE-2008-4546 CVE-2009-0901 CVE-2009-1862 CVE-2009-1863 CVE-2009-1864 CVE-2009-1865 CVE-2009-1866 CVE-2009-1867 CVE-2009-1868 CVE-2009-1869 CVE-2009-1870 CVE-2009-2395 CVE-2009-2493 CVE-2009-3793 CVE-2009-3794 CVE-2009-3796 CVE-2009-3797 CVE-2009-3798 CVE-2009-3799 CVE-2009-3800 CVE-2009-3951 CVE-2010-0186 CVE-2010-0187 CVE-2010-0209 CVE-2010-1297 CVE-2010-2074 CVE-2010-2160 CVE-2010-2161 CVE-2010-2162 CVE-2010-2163 CVE-2010-2164 CVE-2010-2165 CVE-2010-2166 CVE-2010-2167 CVE-2010-2169 CVE-2010-2170 CVE-2010-2171 CVE-2010-2172 CVE-2010-2173 CVE-2010-2174 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2179 CVE-2010-2180 CVE-2010-2181 CVE-2010-2182 CVE-2010-2183 CVE-2010-2184 CVE-2010-2185 CVE-2010-2186 CVE-2010-2187 CVE-2010-2188 CVE-2010-2189 CVE-2010-2213 CVE-2010-2214 CVE-2010-2216 CVE-2010-2884 CVE-2010-3654 CVE-2011-0558 CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0571 CVE-2011-0572 CVE-2011-0573 CVE-2011-0574 CVE-2011-0575 CVE-2011-0577 CVE-2011-0578 CVE-2011-0589 CVE-2011-0607 CVE-2011-0608 CVE-2011-0609 CVE-2011-0611 CVE-2011-0618 CVE-2011-0619 CVE-2011-0620 CVE-2011-0621 CVE-2011-0622 CVE-2011-0623 CVE-2011-0624 CVE-2011-0625 CVE-2011-0626 CVE-2011-0627 CVE-2011-1006 CVE-2011-1022 CVE-2011-2107 CVE-2011-2110 CVE-2011-2130 CVE-2011-2134 CVE-2011-2135 CVE-2011-2136 CVE-2011-2137 CVE-2011-2138 CVE-2011-2139 CVE-2011-2140 CVE-2011-2414 CVE-2011-2415 CVE-2011-2416 CVE-2011-2417 CVE-2011-2425 CVE-2011-2445 CVE-2011-2450 CVE-2011-2451 CVE-2011-2452 CVE-2011-2453 CVE-2011-2454 CVE-2011-2455 CVE-2011-2456 CVE-2011-2457 CVE-2011-2458 CVE-2011-2459 CVE-2011-2460 CVE-2012-0751 CVE-2012-0752 CVE-2012-0753 CVE-2012-0754 CVE-2012-0755 CVE-2012-0756 CVE-2012-0767 CVE-2012-0768 CVE-2012-0769 CVE-2012-0773 CVE-2012-0779 CVE-2012-1535 CVE-2012-2034 CVE-2012-2035 CVE-2012-2036 CVE-2012-2037 CVE-2012-2038 CVE-2012-2039 CVE-2012-2040 CVE-2012-4929 CVE-2012-5248 CVE-2012-5249 CVE-2012-5250 CVE-2012-5251 CVE-2012-5252 CVE-2012-5253 CVE-2012-5254 CVE-2012-5255 CVE-2012-5256 CVE-2012-5257 CVE-2012-5258 CVE-2012-5259 CVE-2012-5260 CVE-2012-5261 CVE-2012-5262 CVE-2012-5263 CVE-2012-5264 CVE-2012-5265 CVE-2012-5266 CVE-2012-5267 CVE-2012-5268 CVE-2012-5269 CVE-2012-5270 CVE-2012-5271 CVE-2012-5272 CVE-2012-5274 CVE-2012-5275 CVE-2012-5276 CVE-2012-5277 CVE-2012-5278 CVE-2012-5279 CVE-2012-5280 CVE-2012-5676 CVE-2012-5677 CVE-2012-5678 CVE-2013-0157 CVE-2013-0504 CVE-2013-0630 CVE-2013-0633 CVE-2013-0634 CVE-2013-0637 CVE-2013-0638 CVE-2013-0639 CVE-2013-0642 CVE-2013-0643 CVE-2013-0644 CVE-2013-0645 CVE-2013-0646 CVE-2013-0647 CVE-2013-0648 CVE-2013-0649 CVE-2013-0650 CVE-2013-1365 CVE-2013-1366 CVE-2013-1367 CVE-2013-1368 CVE-2013-1369 CVE-2013-1370 CVE-2013-1371 CVE-2013-1372 CVE-2013-1373 CVE-2013-1374 CVE-2013-1375 CVE-2013-1378 CVE-2013-1379 CVE-2013-1380 CVE-2013-2555 CVE-2013-2728 CVE-2013-3324 CVE-2013-3325 CVE-2013-3326 CVE-2013-3327 CVE-2013-3328 CVE-2013-3329 CVE-2013-3330 CVE-2013-3331 CVE-2013-3332 CVE-2013-3333 CVE-2013-3334 CVE-2013-3335 CVE-2013-3343 CVE-2013-3344 CVE-2013-3345 CVE-2013-3347 CVE-2013-3361 CVE-2013-3362 CVE-2013-3363 CVE-2013-5324 CVE-2013-5329 CVE-2013-5330 CVE-2013-5331 CVE-2013-5332 CVE-2014-0491 CVE-2014-0492 CVE-2014-0497 CVE-2014-0498 CVE-2014-0499 CVE-2014-0502 CVE-2014-0503 CVE-2014-0506 CVE-2014-0507 CVE-2014-0508 CVE-2014-0509 CVE-2014-0515 CVE-2014-0516 CVE-2014-0517 CVE-2014-0518 CVE-2014-0519 CVE-2014-0520 CVE-2014-0531 CVE-2014-0532 CVE-2014-0533 CVE-2014-0534 CVE-2014-0535 CVE-2014-0536 CVE-2014-0537 CVE-2014-0538 CVE-2014-0539 CVE-2014-0540 CVE-2014-0541 CVE-2014-0542 CVE-2014-0543 CVE-2014-0544 CVE-2014-0545 CVE-2014-0547 CVE-2014-0548 CVE-2014-0549 CVE-2014-0550 CVE-2014-0551 CVE-2014-0552 CVE-2014-0553 CVE-2014-0554 CVE-2014-0555 CVE-2014-0556 CVE-2014-0557 CVE-2014-0559 CVE-2014-4671 CVE-2014-9114 CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 CVE-2015-5218 CVE-2015-7236 CVE-2016-5011 CVE-2018-15473 CVE-2018-15919 CVE-2019-10160 CVE-2019-11597 CVE-2019-12155 CVE-2019-13164 CVE-2019-13508 CVE-2019-14378 CVE-2019-16770 CVE-2019-19770 CVE-2019-3701 CVE-2019-5008 CVE-2019-5418 CVE-2019-5419 CVE-2019-5420 CVE-2019-9458 CVE-2019-9511 CVE-2019-9513 CVE-2020-10942 CVE-2020-11076 CVE-2020-11077 CVE-2020-11494 CVE-2020-11669 CVE-2020-14349 CVE-2020-14350 CVE-2020-15169 CVE-2020-5247 CVE-2020-5249 CVE-2020-5267 CVE-2020-8164 CVE-2020-8165 CVE-2020-8166 CVE-2020-8167 CVE-2020-8184 CVE-2020-8185 CVE-2020-8631 CVE-2020-8632 CVE-2020-8834 CVE-2021-3653 CVE-2021-38198 SUSE-SU-2018:3686-1 SUSE-SU-2019:1773-1 SUSE-SU-2019:2064-1 SUSE-SU-2019:2192-1 SUSE-SU-2019:2473-1 SUSE-SU-2020:0585-1 SUSE-SU-2020:1146-1 SUSE-SU-2020:1417-2 SUSE-SU-2020:2264-1 SUSE-SU-2020:3036-1 Platform(s): openSUSE Leap 15.0 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SUSE Linux Enterprise Module for Public Cloud 15 SUSE Linux Enterprise Module for Python2 packages 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information alsa-1.1.5-lp150.4 is installed OR libasound2-1.1.5-lp150.4 is installed OR libasound2-32bit-1.1.5-lp150.4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information coreutils-8.12-6.25.29 is installed OR coreutils-lang-8.12-6.25.29 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information xen-4.2.5_12-15 is installed OR xen-doc-html-4.2.5_12-15 is installed OR xen-doc-pdf-4.2.5_12-15 is installed OR xen-kmp-default-4.2.5_12_3.0.101_0.47.55-15 is installed OR xen-kmp-pae-4.2.5_12_3.0.101_0.47.55-15 is installed OR xen-libs-4.2.5_12-15 is installed OR xen-libs-32bit-4.2.5_12-15 is installed OR xen-tools-4.2.5_12-15 is installed OR xen-tools-domU-4.2.5_12-15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information ntp-4.2.8p4-5 is installed OR ntp-doc-4.2.8p4-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information flash-player-11.2.202.406-1 is installed OR flash-player-gnome-11.2.202.406-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND rpcbind-0.2.1_rc4-16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libQt5Concurrent5-5.6.1-11 is installed OR libQt5Core5-5.6.1-11 is installed OR libQt5DBus5-5.6.1-11 is installed OR libQt5Gui5-5.6.1-11 is installed OR libQt5Network5-5.6.1-11 is installed OR libQt5OpenGL5-5.6.1-11 is installed OR libQt5PrintSupport5-5.6.1-11 is installed OR libQt5Sql5-5.6.1-11 is installed OR libQt5Sql5-mysql-5.6.1-11 is installed OR libQt5Sql5-postgresql-5.6.1-11 is installed OR libQt5Sql5-sqlite-5.6.1-11 is installed OR libQt5Sql5-unixODBC-5.6.1-11 is installed OR libQt5Test5-5.6.1-11 is installed OR libQt5Widgets5-5.6.1-11 is installed OR libQt5Xml5-5.6.1-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information cups-pk-helper-0.2.5-5 is installed OR cups-pk-helper-lang-0.2.5-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information at-3.1.14-8.6 is installed OR libQtWebKit4-4.8.7+2.3.4-4.7 is installed OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information freetds-1.1.36-3.3 is installed OR libsybdb5-1.1.36-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 is installed AND Package Information ImageMagick-7.0.7.34-3.64 is installed OR ImageMagick-doc-7.0.7.34-3.64 is installed OR ImageMagick-extra-7.0.7.34-3.64 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 is installed AND Package Information cloud-init-19.4-5.24 is installed OR cloud-init-config-suse-19.4-5.24 is installed Definition Synopsis SUSE Linux Enterprise Module for Python2 packages 15 SP1 is installed AND Package Information python-2.7.14-7.14 is installed OR python-base-2.7.14-7.14 is installed OR python-curses-2.7.14-7.14 is installed OR python-devel-2.7.14-7.14 is installed OR python-gdbm-2.7.14-7.14 is installed OR python-xml-2.7.14-7.14 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 is installed AND Package Information openssh-7.6p1-9.3 is installed OR openssh-fips-7.6p1-9.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information qemu-3.1.1-9.3 is installed OR qemu-arm-3.1.1-9.3 is installed OR qemu-audio-alsa-3.1.1-9.3 is installed OR qemu-audio-oss-3.1.1-9.3 is installed OR qemu-audio-pa-3.1.1-9.3 is installed OR qemu-block-curl-3.1.1-9.3 is installed OR qemu-block-iscsi-3.1.1-9.3 is installed OR qemu-block-rbd-3.1.1-9.3 is installed OR qemu-block-ssh-3.1.1-9.3 is installed OR qemu-guest-agent-3.1.1-9.3 is installed OR qemu-ipxe-1.0.0+-9.3 is installed OR qemu-kvm-3.1.1-9.3 is installed OR qemu-lang-3.1.1-9.3 is installed OR qemu-ppc-3.1.1-9.3 is installed OR qemu-s390-3.1.1-9.3 is installed OR qemu-seabios-1.12.0-9.3 is installed OR qemu-sgabios-8-9.3 is installed OR qemu-ui-curses-3.1.1-9.3 is installed OR qemu-ui-gtk-3.1.1-9.3 is installed OR qemu-vgabios-1.12.0-9.3 is installed OR qemu-x86-3.1.1-9.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP2 is installed AND Package Information rmt-server-2.6.5-3.3 is installed OR rmt-server-config-2.6.5-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND ipsec-tools-0.8.0-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kernel-default-3.12.74-60.64.45 is installed OR kernel-default-base-3.12.74-60.64.45 is installed OR kernel-default-devel-3.12.74-60.64.45 is installed OR kernel-default-man-3.12.74-60.64.45 is installed OR kernel-devel-3.12.74-60.64.45 is installed OR kernel-macros-3.12.74-60.64.45 is installed OR kernel-source-3.12.74-60.64.45 is installed OR kernel-syms-3.12.74-60.64.45 is installed OR kernel-xen-3.12.74-60.64.45 is installed OR kernel-xen-base-3.12.74-60.64.45 is installed OR kernel-xen-devel-3.12.74-60.64.45 is installed OR kgraft-patch-3_12_74-60_64_45-default-1-4 is installed OR kgraft-patch-3_12_74-60_64_45-xen-1-4 is installed OR kgraft-patch-SLE12-SP1_Update_16-1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information gv-3.7.4-1 is installed OR wdiff-1.2.1-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information openslp-2.0.0-18.17 is installed OR openslp-32bit-2.0.0-18.17 is installed OR openslp-server-2.0.0-18.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND clamav-0.100.2-33.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_121-92_80-default-2-2 is installed OR kgraft-patch-SLE12-SP2_Update_22-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND libotr5-4.0.0-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information perl-5.18.2-12.20 is installed OR perl-32bit-5.18.2-12.20 is installed OR perl-base-5.18.2-12.20 is installed OR perl-doc-5.18.2-12.20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_175-94_79-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_23-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libwireshark9-2.4.10-48.32 is installed OR libwiretap7-2.4.10-48.32 is installed OR libwscodecs1-2.4.10-48.32 is installed OR libwsutil8-2.4.10-48.32 is installed OR wireshark-2.4.10-48.32 is installed OR wireshark-gtk-2.4.10-48.32 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information colord-gtk-lang-0.1.26-6 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-12 is installed OR libcolord2-32bit-1.3.3-12 is installed OR libcolorhug2-1.3.3-12 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND kgraft-patch-4_4_180-94_147-default-3-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 15 is installed AND Package Information libecpg6-10.14-4.25 is installed OR libpq5-10.14-4.25 is installed OR libpq5-32bit-10.14-4.25 is installed OR postgresql10-10.14-4.25 is installed OR postgresql10-contrib-10.14-4.25 is installed OR postgresql10-devel-10.14-4.25 is installed OR postgresql10-docs-10.14-4.25 is installed OR postgresql10-plperl-10.14-4.25 is installed OR postgresql10-plpython-10.14-4.25 is installed OR postgresql10-pltcl-10.14-4.25 is installed OR postgresql10-server-10.14-4.25 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND Package Information kernel-default-4.12.14-197.40 is installed OR kernel-default-extra-4.12.14-197.40 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information java-1_8_0-openjdk-1.8.0.181-27.26 is installed OR java-1_8_0-openjdk-demo-1.8.0.181-27.26 is installed OR java-1_8_0-openjdk-devel-1.8.0.181-27.26 is installed OR java-1_8_0-openjdk-headless-1.8.0.181-27.26 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information grafana-4.5.1-4.3 is installed OR kafka-0.9.0.1-5.3 is installed OR logstash-2.4.1-5.4 is installed OR openstack-monasca-installer-20180622_15.06-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information ruby2.1-rubygem-activejob-4_2-4.2.9-3.6 is installed OR rubygem-activejob-4_2-4.2.9-3.6 is installed
BACK