Oval Definition:	oval:org.opensuse.security:def:52723
Revision Date: 2020-12-01 Version: 1 Title: Security update for the Linux Kernel (Live Patch 12 for SLE 15) (Important) Description: This update for the Linux Kernel 4.12.14-150_27 fixes several issues. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021). Family: unix Class: patch Status: Reference(s): 1058115 1071995 1149841 1151021 1154366 1165629 1165631 1171988 1172428 1173798 1174205 1174757 1175112 1175122 1175128 1175204 1175213 1175515 1175518 1175691 1175992 1176069 909219 928323 940191 940806 943557 943558 943608 946204 CVE-2007-6746 CVE-2009-0688 CVE-2010-2242 CVE-2011-1146 CVE-2011-2511 CVE-2011-3389 CVE-2011-4600 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2012-1571 CVE-2012-2369 CVE-2012-2673 CVE-2012-2737 CVE-2012-3445 CVE-2013-0170 CVE-2013-1752 CVE-2013-1962 CVE-2013-2218 CVE-2013-2230 CVE-2013-4153 CVE-2013-4154 CVE-2013-4238 CVE-2013-4239 CVE-2013-4296 CVE-2013-4297 CVE-2013-4311 CVE-2013-4399 CVE-2013-4400 CVE-2013-4401 CVE-2013-6436 CVE-2013-6457 CVE-2013-6458 CVE-2014-0028 CVE-2014-0179 CVE-2014-0580 CVE-2014-0587 CVE-2014-1447 CVE-2014-2667 CVE-2014-3248 CVE-2014-3633 CVE-2014-3710 CVE-2014-4650 CVE-2014-8116 CVE-2014-8117 CVE-2014-8443 CVE-2014-9162 CVE-2014-9163 CVE-2014-9164 CVE-2015-3146 CVE-2015-4473 CVE-2015-4474 CVE-2015-4475 CVE-2015-4478 CVE-2015-4479 CVE-2015-4484 CVE-2015-4485 CVE-2015-4486 CVE-2015-4487 CVE-2015-4488 CVE-2015-4489 CVE-2015-4491 CVE-2015-4492 CVE-2015-4495 CVE-2015-4497 CVE-2015-4498 CVE-2015-7236 CVE-2016-0772 CVE-2016-1000110 CVE-2016-5636 CVE-2016-5699 CVE-2016-9082 CVE-2017-7475 CVE-2017-9814 CVE-2019-14835 CVE-2020-10135 CVE-2020-14314 CVE-2020-14331 CVE-2020-14356 CVE-2020-14386 CVE-2020-16166 CVE-2020-1749 CVE-2020-24394 SUSE-SU-2015:1476-1 SUSE-SU-2015:1705-2 SUSE-SU-2015:1707-2 SUSE-SU-2020:2610-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information colord-1.4.2-lp150.1 is installed OR colord-color-profiles-1.4.2-lp150.1 is installed OR colord-gtk-lang-0.1.26-lp150.1 is installed OR colord-lang-1.4.2-lp150.1 is installed OR libcolord-gtk1-0.1.26-lp150.1 is installed OR libcolord2-1.4.2-lp150.1 is installed OR libcolorhug2-1.4.2-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information apache2-mod_php7-7.2.5-lp151.6.3 is installed OR php7-7.2.5-lp151.6.3 is installed OR php7-bcmath-7.2.5-lp151.6.3 is installed OR php7-bz2-7.2.5-lp151.6.3 is installed OR php7-calendar-7.2.5-lp151.6.3 is installed OR php7-ctype-7.2.5-lp151.6.3 is installed OR php7-curl-7.2.5-lp151.6.3 is installed OR php7-dba-7.2.5-lp151.6.3 is installed OR php7-devel-7.2.5-lp151.6.3 is installed OR php7-dom-7.2.5-lp151.6.3 is installed OR php7-embed-7.2.5-lp151.6.3 is installed OR php7-enchant-7.2.5-lp151.6.3 is installed OR php7-exif-7.2.5-lp151.6.3 is installed OR php7-fastcgi-7.2.5-lp151.6.3 is installed OR php7-fileinfo-7.2.5-lp151.6.3 is installed OR php7-firebird-7.2.5-lp151.6.3 is installed OR php7-fpm-7.2.5-lp151.6.3 is installed OR php7-ftp-7.2.5-lp151.6.3 is installed OR php7-gd-7.2.5-lp151.6.3 is installed OR php7-gettext-7.2.5-lp151.6.3 is installed OR php7-gmp-7.2.5-lp151.6.3 is installed OR php7-iconv-7.2.5-lp151.6.3 is installed OR php7-intl-7.2.5-lp151.6.3 is installed OR php7-json-7.2.5-lp151.6.3 is installed OR php7-ldap-7.2.5-lp151.6.3 is installed OR php7-mbstring-7.2.5-lp151.6.3 is installed OR php7-mysql-7.2.5-lp151.6.3 is installed OR php7-odbc-7.2.5-lp151.6.3 is installed OR php7-opcache-7.2.5-lp151.6.3 is installed OR php7-openssl-7.2.5-lp151.6.3 is installed OR php7-pcntl-7.2.5-lp151.6.3 is installed OR php7-pdo-7.2.5-lp151.6.3 is installed OR php7-pear-7.2.5-lp151.6.3 is installed OR php7-pear-Archive_Tar-7.2.5-lp151.6.3 is installed OR php7-pgsql-7.2.5-lp151.6.3 is installed OR php7-phar-7.2.5-lp151.6.3 is installed OR php7-posix-7.2.5-lp151.6.3 is installed OR php7-readline-7.2.5-lp151.6.3 is installed OR php7-shmop-7.2.5-lp151.6.3 is installed OR php7-snmp-7.2.5-lp151.6.3 is installed OR php7-soap-7.2.5-lp151.6.3 is installed OR php7-sockets-7.2.5-lp151.6.3 is installed OR php7-sodium-7.2.5-lp151.6.3 is installed OR php7-sqlite-7.2.5-lp151.6.3 is installed OR php7-sysvmsg-7.2.5-lp151.6.3 is installed OR php7-sysvsem-7.2.5-lp151.6.3 is installed OR php7-sysvshm-7.2.5-lp151.6.3 is installed OR php7-testresults-7.2.5-lp151.6.3 is installed OR php7-tidy-7.2.5-lp151.6.3 is installed OR php7-tokenizer-7.2.5-lp151.6.3 is installed OR php7-wddx-7.2.5-lp151.6.3 is installed OR php7-xmlreader-7.2.5-lp151.6.3 is installed OR php7-xmlrpc-7.2.5-lp151.6.3 is installed OR php7-xmlwriter-7.2.5-lp151.6.3 is installed OR php7-xsl-7.2.5-lp151.6.3 is installed OR php7-zip-7.2.5-lp151.6.3 is installed OR php7-zlib-7.2.5-lp151.6.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information Mesa-7.11.2-0.9 is installed OR Mesa-32bit-7.11.2-0.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information libgcrypt-1.5.0-0.19 is installed OR libgcrypt11-1.5.0-0.19 is installed OR libgcrypt11-32bit-1.5.0-0.19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information libldap-2_4-2-2.4.26-0.35 is installed OR libldap-2_4-2-32bit-2.4.26-0.35 is installed OR openldap2-client-2.4.26-0.35 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libvirt-1.2.5-13 is installed OR libvirt-client-1.2.5-13 is installed OR libvirt-client-32bit-1.2.5-13 is installed OR libvirt-daemon-1.2.5-13 is installed OR libvirt-daemon-config-network-1.2.5-13 is installed OR libvirt-daemon-config-nwfilter-1.2.5-13 is installed OR libvirt-daemon-driver-interface-1.2.5-13 is installed OR libvirt-daemon-driver-libxl-1.2.5-13 is installed OR libvirt-daemon-driver-lxc-1.2.5-13 is installed OR libvirt-daemon-driver-network-1.2.5-13 is installed OR libvirt-daemon-driver-nodedev-1.2.5-13 is installed OR libvirt-daemon-driver-nwfilter-1.2.5-13 is installed OR libvirt-daemon-driver-qemu-1.2.5-13 is installed OR libvirt-daemon-driver-secret-1.2.5-13 is installed OR libvirt-daemon-driver-storage-1.2.5-13 is installed OR libvirt-daemon-lxc-1.2.5-13 is installed OR libvirt-daemon-qemu-1.2.5-13 is installed OR libvirt-daemon-xen-1.2.5-13 is installed OR libvirt-doc-1.2.5-13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information accountsservice-0.6.35-3 is installed OR accountsservice-lang-0.6.35-3 is installed OR libaccountsservice0-0.6.35-3 is installed OR typelib-1_0-AccountsService-1_0-0.6.35-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information file-5.19-9 is installed OR file-magic-5.19-9 is installed OR libmagic1-5.19-9 is installed OR libmagic1-32bit-5.19-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libcairo-gobject2-1.15.2-25.3 is installed OR libcairo-gobject2-32bit-1.15.2-25.3 is installed OR libcairo-script-interpreter2-1.15.2-25.3 is installed OR libcairo2-1.15.2-25.3 is installed OR libcairo2-32bit-1.15.2-25.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND Package Information kernel-livepatch-4_12_14-150_27-default-2-2 is installed OR kernel-livepatch-SLE15_Update_12-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cups-1.7.5-9 is installed OR cups-client-1.7.5-9 is installed OR cups-libs-1.7.5-9 is installed OR cups-libs-32bit-1.7.5-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_66-default-6-2 is installed OR kgraft-patch-3_12_74-60_64_66-xen-6-2 is installed OR kgraft-patch-SLE12-SP1_Update_23-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND libzip2-0.11.1-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information openssh-7.2p2-74.35 is installed OR openssh-askpass-gnome-7.2p2-74.35 is installed OR openssh-fips-7.2p2-74.35 is installed OR openssh-helpers-7.2p2-74.35 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information kgraft-patch-4_4_121-92_95-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_25-7-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.35-38.29 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.35-38.29 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.35-38.29 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.35-38.29 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.35-38.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libvirt-3.3.0-5.40 is installed OR libvirt-admin-3.3.0-5.40 is installed OR libvirt-client-3.3.0-5.40 is installed OR libvirt-daemon-3.3.0-5.40 is installed OR libvirt-daemon-config-network-3.3.0-5.40 is installed OR libvirt-daemon-config-nwfilter-3.3.0-5.40 is installed OR libvirt-daemon-driver-interface-3.3.0-5.40 is installed OR libvirt-daemon-driver-libxl-3.3.0-5.40 is installed OR libvirt-daemon-driver-lxc-3.3.0-5.40 is installed OR libvirt-daemon-driver-network-3.3.0-5.40 is installed OR libvirt-daemon-driver-nodedev-3.3.0-5.40 is installed OR libvirt-daemon-driver-nwfilter-3.3.0-5.40 is installed OR libvirt-daemon-driver-qemu-3.3.0-5.40 is installed OR libvirt-daemon-driver-secret-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-core-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-disk-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-iscsi-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-logical-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-mpath-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-rbd-3.3.0-5.40 is installed OR libvirt-daemon-driver-storage-scsi-3.3.0-5.40 is installed OR libvirt-daemon-hooks-3.3.0-5.40 is installed OR libvirt-daemon-lxc-3.3.0-5.40 is installed OR libvirt-daemon-qemu-3.3.0-5.40 is installed OR libvirt-daemon-xen-3.3.0-5.40 is installed OR libvirt-doc-3.3.0-5.40 is installed OR libvirt-libs-3.3.0-5.40 is installed OR libvirt-lock-sanlock-3.3.0-5.40 is installed OR libvirt-nss-3.3.0-5.40 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information dovecot22-2.2.31-19.17 is installed OR dovecot22-backend-mysql-2.2.31-19.17 is installed OR dovecot22-backend-pgsql-2.2.31-19.17 is installed OR dovecot22-backend-sqlite-2.2.31-19.17 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr6.0-30.60 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr6.0-30.60 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr6.0-30.60 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libdcerpc-binding0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libdcerpc-binding0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libdcerpc0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libdcerpc0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libndr-krb5pac0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libndr-krb5pac0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libndr-nbt0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libndr-nbt0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libndr-standard0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libndr-standard0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libndr0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libndr0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libnetapi0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libnetapi0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-credentials0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-credentials0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-errors0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-errors0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-hostconfig0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-hostconfig0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-passdb0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-passdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-util0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamba-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamdb0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsamdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsmbclient0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsmbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsmbconf0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsmbconf0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsmbldap0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libsmbldap0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libtevent-util0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libtevent-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libwbclient0-4.6.14+git.157.c2d53c2b191-3.29 is installed OR libwbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR samba-4.6.14+git.157.c2d53c2b191-3.29 is installed OR samba-client-4.6.14+git.157.c2d53c2b191-3.29 is installed OR samba-client-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR samba-doc-4.6.14+git.157.c2d53c2b191-3.29 is installed OR samba-libs-4.6.14+git.157.c2d53c2b191-3.29 is installed OR samba-libs-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed OR samba-winbind-4.6.14+git.157.c2d53c2b191-3.29 is installed OR samba-winbind-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information coreutils-8.25-13.7 is installed OR coreutils-lang-8.25-13.7 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND wget-1.14-21.3 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information libexif-0.6.22-8.9 is installed OR libexif12-0.6.22-8.9 is installed OR libexif12-32bit-0.6.22-8.9 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND mailman-2.1.17-3.11 is installed Definition Synopsis SUSE OpenStack Cloud 9 is installed AND python-urllib3-1.23-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libpolkit0-0.113-5.18 is installed OR polkit-0.113-5.18 is installed OR typelib-1_0-Polkit-1_0-0.113-5.18 is installed
BACK