Oval Definition:	oval:org.opensuse.security:def:52878
Revision Date: 2020-12-01 Version: 1 Title: Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_4 fixes several issues. The following security issues were fixed: - CVE-2019-14896: A heap-based buffer overflow vulnerability was found in the Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP (bsc#1157157). - CVE-2019-14897: A stack-based buffer overflow was found in the Marvell WiFi chip driver. An attacker was able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA (bsc#1157155). Family: unix Class: patch Status: Reference(s): 1103203 1160467 1160468 1177513 1177729 915918 942801 948790 948791 953817 982385 982386 CVE-2008-1227 CVE-2008-3825 CVE-2009-0035 CVE-2009-1384 CVE-2009-3939 CVE-2009-4026 CVE-2009-4027 CVE-2009-4131 CVE-2009-4138 CVE-2009-4536 CVE-2009-4538 CVE-2010-1146 CVE-2010-1436 CVE-2010-1641 CVE-2010-2066 CVE-2010-2942 CVE-2010-2954 CVE-2010-2955 CVE-2010-3081 CVE-2010-3296 CVE-2010-3297 CVE-2010-3298 CVE-2010-3301 CVE-2010-3310 CVE-2011-0712 CVE-2011-1020 CVE-2011-1577 CVE-2011-2203 CVE-2012-0056 CVE-2012-2372 CVE-2012-2738 CVE-2013-0160 CVE-2013-0231 CVE-2013-0913 CVE-2013-2850 CVE-2013-4587 CVE-2013-6367 CVE-2013-6368 CVE-2013-6376 CVE-2013-6405 CVE-2014-00691 CVE-2014-0102 CVE-2014-0131 CVE-2014-0196 CVE-2014-2523 CVE-2014-2568 CVE-2014-3185 CVE-2014-3230 CVE-2014-3534 CVE-2014-3610 CVE-2014-3611 CVE-2014-3647 CVE-2014-3673 CVE-2014-3687 CVE-2014-3690 CVE-2014-3917 CVE-2014-3940 CVE-2014-4171 CVE-2014-4608 CVE-2014-4652 CVE-2014-4653 CVE-2014-4654 CVE-2014-4655 CVE-2014-4656 CVE-2014-4699 CVE-2014-4943 CVE-2014-5045 CVE-2014-5077 CVE-2014-5206 CVE-2014-5207 CVE-2014-5471 CVE-2014-5472 CVE-2014-7822 CVE-2014-7826 CVE-2014-7841 CVE-2014-8086 CVE-2014-8133 CVE-2014-8159 CVE-2014-8160 CVE-2014-8559 CVE-2014-8709 CVE-2014-8964 CVE-2014-9090 CVE-2014-9419 CVE-2014-9420 CVE-2014-9584 CVE-2014-9585 CVE-2014-9728 CVE-2014-9729 CVE-2014-9730 CVE-2014-9731 CVE-2015-0272 CVE-2015-0295 CVE-2015-0313 CVE-2015-0314 CVE-2015-0315 CVE-2015-0316 CVE-2015-0317 CVE-2015-0318 CVE-2015-0319 CVE-2015-0320 CVE-2015-0321 CVE-2015-0322 CVE-2015-0323 CVE-2015-0324 CVE-2015-0325 CVE-2015-0326 CVE-2015-0327 CVE-2015-0328 CVE-2015-0329 CVE-2015-0330 CVE-2015-0777 CVE-2015-1465 CVE-2015-1805 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 CVE-2015-2041 CVE-2015-2042 CVE-2015-2150 CVE-2015-2325 CVE-2015-2327 CVE-2015-2328 CVE-2015-2666 CVE-2015-2830 CVE-2015-2922 CVE-2015-3210 CVE-2015-3212 CVE-2015-3217 CVE-2015-3331 CVE-2015-3332 CVE-2015-3339 CVE-2015-3636 CVE-2015-4036 CVE-2015-4167 CVE-2015-4491 CVE-2015-4692 CVE-2015-5073 CVE-2015-5156 CVE-2015-5157 CVE-2015-5283 CVE-2015-5307 CVE-2015-5364 CVE-2015-5366 CVE-2015-6252 CVE-2015-6937 CVE-2015-7613 CVE-2015-7673 CVE-2015-7674 CVE-2015-8023 CVE-2015-8104 CVE-2015-8380 CVE-2016-0749 CVE-2016-1283 CVE-2016-2150 CVE-2016-3191 CVE-2017-16611 CVE-2017-16818 CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-7262 CVE-2019-14896 CVE-2019-14897 CVE-2020-12351 CVE-2020-25645 SUSE-SU-2015:0236-1 SUSE-SU-2015:2183-2 SUSE-SU-2015:2195-2 SUSE-SU-2016:1561-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information cracklib-2.9.6-lp150.2 is installed OR libcrack2-2.9.6-lp150.2 is installed OR libcrack2-32bit-2.9.6-lp150.2 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND ledger-3.1.3-lp151.3.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libpoppler-glib4-0.12.3-1.8 is installed OR libpoppler-qt4-3-0.12.3-1.8 is installed OR libpoppler5-0.12.3-1.8 is installed OR poppler-tools-0.12.3-1.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information flash-player-11.2.202.521-0.17 is installed OR flash-player-gnome-11.2.202.521-0.17 is installed OR flash-player-kde4-11.2.202.521-0.17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information flash-player-11.2.202.491-0.11 is installed OR flash-player-gnome-11.2.202.491-0.11 is installed OR flash-player-kde4-11.2.202.491-0.11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information flash-player-11.2.202.442-67 is installed OR flash-player-gnome-11.2.202.442-67 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information kernel-default-3.12.49-11 is installed OR kernel-default-devel-3.12.49-11 is installed OR kernel-default-extra-3.12.49-11 is installed OR kernel-devel-3.12.49-11 is installed OR kernel-macros-3.12.49-11 is installed OR kernel-source-3.12.49-11 is installed OR kernel-syms-3.12.49-11 is installed OR kernel-xen-3.12.49-11 is installed OR kernel-xen-devel-3.12.49-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libpcre1-8.39-7 is installed OR libpcre1-32bit-8.39-7 is installed OR libpcre16-0-8.39-7 is installed OR libpcrecpp0-8.39-7 is installed OR libpcrecpp0-32bit-8.39-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information ceph-common-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR libcephfs2-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR librados2-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR libradosstriper1-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR librbd1-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR librgw2-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR python-cephfs-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR python-rados-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR python-rbd-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR python-rgw-12.2.8+git.1536505967.080f2248ff-2.15 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND Package Information kernel-livepatch-4_12_14-197_4-default-8-2 is installed OR kernel-livepatch-SLE15-SP1_Update_1-8-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND Package Information kernel-livepatch-5_3_18-24_15-default-3-2 is installed OR kernel-livepatch-SLE15-SP2_Update_3-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information MozillaFirefox-38.4.0esr-51 is installed OR MozillaFirefox-translations-38.4.0esr-51 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information ctdb-4.2.4-28.24 is installed OR libdcerpc-binding0-4.2.4-28.24 is installed OR libdcerpc-binding0-32bit-4.2.4-28.24 is installed OR libdcerpc0-4.2.4-28.24 is installed OR libdcerpc0-32bit-4.2.4-28.24 is installed OR libgensec0-4.2.4-28.24 is installed OR libgensec0-32bit-4.2.4-28.24 is installed OR libndr-krb5pac0-4.2.4-28.24 is installed OR libndr-krb5pac0-32bit-4.2.4-28.24 is installed OR libndr-nbt0-4.2.4-28.24 is installed OR libndr-nbt0-32bit-4.2.4-28.24 is installed OR libndr-standard0-4.2.4-28.24 is installed OR libndr-standard0-32bit-4.2.4-28.24 is installed OR libndr0-4.2.4-28.24 is installed OR libndr0-32bit-4.2.4-28.24 is installed OR libnetapi0-4.2.4-28.24 is installed OR libnetapi0-32bit-4.2.4-28.24 is installed OR libregistry0-4.2.4-28.24 is installed OR libsamba-credentials0-4.2.4-28.24 is installed OR libsamba-credentials0-32bit-4.2.4-28.24 is installed OR libsamba-hostconfig0-4.2.4-28.24 is installed OR libsamba-hostconfig0-32bit-4.2.4-28.24 is installed OR libsamba-passdb0-4.2.4-28.24 is installed OR libsamba-passdb0-32bit-4.2.4-28.24 is installed OR libsamba-util0-4.2.4-28.24 is installed OR libsamba-util0-32bit-4.2.4-28.24 is installed OR libsamdb0-4.2.4-28.24 is installed OR libsamdb0-32bit-4.2.4-28.24 is installed OR libsmbclient-raw0-4.2.4-28.24 is installed OR libsmbclient-raw0-32bit-4.2.4-28.24 is installed OR libsmbclient0-4.2.4-28.24 is installed OR libsmbclient0-32bit-4.2.4-28.24 is installed OR libsmbconf0-4.2.4-28.24 is installed OR libsmbconf0-32bit-4.2.4-28.24 is installed OR libsmbldap0-4.2.4-28.24 is installed OR libsmbldap0-32bit-4.2.4-28.24 is installed OR libtevent-util0-4.2.4-28.24 is installed OR libtevent-util0-32bit-4.2.4-28.24 is installed OR libwbclient0-4.2.4-28.24 is installed OR libwbclient0-32bit-4.2.4-28.24 is installed OR samba-4.2.4-28.24 is installed OR samba-32bit-4.2.4-28.24 is installed OR samba-client-4.2.4-28.24 is installed OR samba-client-32bit-4.2.4-28.24 is installed OR samba-doc-4.2.4-28.24 is installed OR samba-libs-4.2.4-28.24 is installed OR samba-libs-32bit-4.2.4-28.24 is installed OR samba-winbind-4.2.4-28.24 is installed OR samba-winbind-32bit-4.2.4-28.24 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr3.0-10 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr3.0-10 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr3.0-10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information openssh-7.2p2-74.30 is installed OR openssh-askpass-gnome-7.2p2-74.30 is installed OR openssh-fips-7.2p2-74.30 is installed OR openssh-helpers-7.2p2-74.30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information libopenssl-devel-1.0.2j-60.39 is installed OR libopenssl1_0_0-1.0.2j-60.39 is installed OR libopenssl1_0_0-32bit-1.0.2j-60.39 is installed OR libopenssl1_0_0-hmac-1.0.2j-60.39 is installed OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.39 is installed OR openssl-1.0.2j-60.39 is installed OR openssl-doc-1.0.2j-60.39 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information MozillaFirefox-52.8.1esr-109.34 is installed OR MozillaFirefox-devel-52.8.1esr-109.34 is installed OR MozillaFirefox-translations-52.8.1esr-109.34 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information audiofile-0.3.6-10 is installed OR libaudiofile1-0.3.6-10 is installed OR libaudiofile1-32bit-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information kgraft-patch-4_4_156-94_57-default-8-2 is installed OR kgraft-patch-SLE12-SP3_Update_18-8-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information kgraft-patch-4_4_156-94_64-default-6-2 is installed OR kgraft-patch-SLE12-SP3_Update_20-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libsndfile-1.0.25-36.16 is installed OR libsndfile1-1.0.25-36.16 is installed OR libsndfile1-32bit-1.0.25-36.16 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND dstat-0.7.3-1 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND yast2-smt-3.0.14-17.3 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND sudo-1.8.20p2-3.17 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND couchdb-1.7.2-3.6 is installed
BACK