Oval Definition:	oval:org.opensuse.security:def:52722
Revision Date: 2020-12-01 Version: 1 Title: Security update for the Linux Kernel (Live Patch 8 for SLE 15) (Important) Description: This update for the Linux Kernel 4.12.14-25_28 fixes several issues. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021). Family: unix Class: patch Status: Reference(s): 1149841 1151021 1165631 1173942 1174247 904603 911796 940191 944208 944209 946204 CVE-2009-2625 CVE-2009-2666 CVE-2009-3560 CVE-2009-3720 CVE-2010-1167 CVE-2011-0461 CVE-2011-1000 CVE-2011-1521 CVE-2011-1947 CVE-2011-3389 CVE-2011-3389 CVE-2011-4944 CVE-2012-0804 CVE-2012-0845 CVE-2012-0876 CVE-2012-1147 CVE-2012-1148 CVE-2012-1150 CVE-2012-1152 CVE-2012-3482 CVE-2013-0157 CVE-2013-1431 CVE-2013-1752 CVE-2013-1753 CVE-2013-4238 CVE-2013-6393 CVE-2013-6487 CVE-2014-0004 CVE-2014-1912 CVE-2014-2525 CVE-2014-3775 CVE-2014-4650 CVE-2014-7185 CVE-2014-8564 CVE-2014-9114 CVE-2014-9130 CVE-2014-9496 CVE-2015-5218 CVE-2015-5234 CVE-2015-5235 CVE-2015-7236 CVE-2016-0772 CVE-2016-1000110 CVE-2016-2779 CVE-2016-5011 CVE-2016-5636 CVE-2016-5699 CVE-2017-2616 CVE-2018-7738 CVE-2019-14835 CVE-2020-11668 CVE-2020-14331 CVE-2020-1749 SUSE-SU-2015:1682-1 SUSE-SU-2015:1705-2 SUSE-SU-2020:2525-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND cifs-utils-6.5-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information kernel-debug-4.12.14-lp151.28.7 is installed OR kernel-debug-base-4.12.14-lp151.28.7 is installed OR kernel-debug-devel-4.12.14-lp151.28.7 is installed OR kernel-default-4.12.14-lp151.28.7 is installed OR kernel-default-base-4.12.14-lp151.28.7 is installed OR kernel-default-devel-4.12.14-lp151.28.7 is installed OR kernel-devel-4.12.14-lp151.28.7 is installed OR kernel-docs-4.12.14-lp151.28.7 is installed OR kernel-docs-html-4.12.14-lp151.28.7 is installed OR kernel-kvmsmall-4.12.14-lp151.28.7 is installed OR kernel-kvmsmall-base-4.12.14-lp151.28.7 is installed OR kernel-kvmsmall-devel-4.12.14-lp151.28.7 is installed OR kernel-macros-4.12.14-lp151.28.7 is installed OR kernel-obs-build-4.12.14-lp151.28.7 is installed OR kernel-obs-qa-4.12.14-lp151.28.7 is installed OR kernel-source-4.12.14-lp151.28.7 is installed OR kernel-source-vanilla-4.12.14-lp151.28.7 is installed OR kernel-syms-4.12.14-lp151.28.7 is installed OR kernel-vanilla-4.12.14-lp151.28.7 is installed OR kernel-vanilla-base-4.12.14-lp151.28.7 is installed OR kernel-vanilla-devel-4.12.14-lp151.28.7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information ImageMagick-6.4.3.6-7.26 is installed OR libMagick++1-6.4.3.6-7.26 is installed OR libMagickCore1-6.4.3.6-7.26 is installed OR libMagickCore1-32bit-6.4.3.6-7.26 is installed OR libMagickWand1-6.4.3.6-7.26 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libgcrypt11-1.5.0-0.15 is installed OR libgcrypt11-32bit-1.5.0-0.15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information ntp-4.2.8p4-5 is installed OR ntp-doc-4.2.8p4-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libudisks2-0-2.1.3-1 is installed OR udisks2-2.1.3-1 is installed OR udisks2-lang-2.1.3-1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-9 is installed OR aaa_base-extras-13.2+git20140911.61c1681-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND fetchmail-6.3.26-12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libblkid1-2.29.2-7 is installed OR libblkid1-32bit-2.29.2-7 is installed OR libfdisk1-2.29.2-7 is installed OR libmount1-2.29.2-7 is installed OR libmount1-32bit-2.29.2-7 is installed OR libsmartcols1-2.29.2-7 is installed OR libuuid-devel-2.29.2-7 is installed OR libuuid1-2.29.2-7 is installed OR libuuid1-32bit-2.29.2-7 is installed OR python-libmount-2.29.2-7 is installed OR util-linux-2.29.2-7 is installed OR util-linux-lang-2.29.2-7 is installed OR util-linux-systemd-2.29.2-7 is installed OR uuidd-2.29.2-7 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-25_28-default-5-2 is installed OR kernel-livepatch-SLE15_Update_8-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cron-4.2-58 is installed OR cronie-1.4.11-58 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_69-default-5-2 is installed OR kgraft-patch-3_12_74-60_64_69-xen-5-2 is installed OR kgraft-patch-SLE12-SP1_Update_24-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND libyaml-0-2-0.1.6-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND ucode-intel-20190514-13.44 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_121-92_92-default-8-2 is installed OR kgraft-patch-SLE12-SP2_Update_24-8-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information openssh-7.2p2-74.30 is installed OR openssh-askpass-gnome-7.2p2-74.30 is installed OR openssh-fips-7.2p2-74.30 is installed OR openssh-helpers-7.2p2-74.30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information postgresql96-9.6.15-3.29 is installed OR postgresql96-contrib-9.6.15-3.29 is installed OR postgresql96-docs-9.6.15-3.29 is installed OR postgresql96-libs-9.6.15-3.29 is installed OR postgresql96-plperl-9.6.15-3.29 is installed OR postgresql96-plpython-9.6.15-3.29 is installed OR postgresql96-pltcl-9.6.15-3.29 is installed OR postgresql96-server-9.6.15-3.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information MozillaFirefox-60.9.0-109.86 is installed OR MozillaFirefox-translations-common-60.9.0-109.86 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information libdcerpc-binding0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libdcerpc-binding0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libdcerpc0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libdcerpc0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-krb5pac0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-krb5pac0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-nbt0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-nbt0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-standard0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-standard0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libnetapi0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libnetapi0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-credentials0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-credentials0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-errors0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-errors0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-hostconfig0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-hostconfig0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-passdb0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-passdb0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-util0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-util0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamdb0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamdb0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbclient0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbclient0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbconf0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbconf0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbldap0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbldap0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libtevent-util0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libtevent-util0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libwbclient0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libwbclient0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-client-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-client-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-doc-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-libs-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-libs-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-winbind-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-winbind-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libsoup-2.62.2-5.7 is installed OR libsoup-2_4-1-2.62.2-5.7 is installed OR libsoup-2_4-1-32bit-2.62.2-5.7 is installed OR libsoup-lang-2.62.2-5.7 is installed OR typelib-1_0-Soup-2_4-2.62.2-5.7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND coolkey-1.1.0-148.3 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information openvpn-2.3.8-16.20 is installed OR openvpn-auth-pam-plugin-2.3.8-16.20 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information krb5-appl-1.0.3-3.3 is installed OR krb5-appl-clients-1.0.3-3.3 is installed OR krb5-appl-servers-1.0.3-3.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND clamav-0.100.3-33.26 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-SQLAlchemy-1.2.10-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed
BACK