Oval Definition:	oval:org.opensuse.security:def:55838
Revision Date: 2021-02-10 Version: 1 Title: Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP2) (Important) Description: This update for the Linux Kernel 4.4.121-92_146 fixes several issues. The following security issues were fixed: - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877). Family: unix Class: patch Status: Reference(s): 1005633 1005634 1005635 1005637 1005638 1005640 1005642 1005643 1005645 1005646 1027908 1032261 1055825 1056058 1057460 1065363 1076390 1082810 1083125 1085018 1085447 1086730 1090368 1090646 1118319 1118320 1158763 1179877 1180008 1180030 1180032 1180562 793927 794316 797014 797031 797523 798188 799694 800156 800275 802690 805094 806736 857200 865241 899486 916953 922741 929900 934524 934527 934528 942801 948791 955131 966304 976920 979261 979906 990592 998760 CVE-2009-3235 CVE-2011-3372 CVE-2012-5634 CVE-2012-6075 CVE-2013-0153 CVE-2013-7252 CVE-2014-7204 CVE-2014-8161 CVE-2014-9556 CVE-2014-9732 CVE-2015-0241 CVE-2015-0243 CVE-2015-0244 CVE-2015-4470 CVE-2015-4471 CVE-2015-4491 CVE-2015-7674 CVE-2016-4574 CVE-2016-4579 CVE-2016-7167 CVE-2016-8615 CVE-2016-8616 CVE-2016-8617 CVE-2016-8618 CVE-2016-8619 CVE-2016-8620 CVE-2016-8621 CVE-2016-8622 CVE-2016-8623 CVE-2016-8624 CVE-2017-13166 CVE-2017-3735 CVE-2018-1000140 CVE-2018-2579 CVE-2018-2582 CVE-2018-2588 CVE-2018-2599 CVE-2018-2602 CVE-2018-2603 CVE-2018-2618 CVE-2018-2633 CVE-2018-2634 CVE-2018-2637 CVE-2018-2641 CVE-2018-2657 CVE-2018-2663 CVE-2018-2677 CVE-2018-2678 CVE-2018-8781 CVE-2018-8897 CVE-2018-9568 CVE-2019-18900 CVE-2020-0465 CVE-2020-0466 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-36158 SUSE-SU-2015:0512-1 SUSE-SU-2015:0639-1 SUSE-SU-2015:1787-1 SUSE-SU-2015:2131-1 SUSE-SU-2016:1510-1 SUSE-SU-2016:2097-1 SUSE-SU-2016:2699-1 SUSE-SU-2017:2981-1 SUSE-SU-2018:0743-1 SUSE-SU-2018:0828-1 SUSE-SU-2018:1514-1 SUSE-SU-2018:4158-1 SUSE-SU-2020:0079-1 SUSE-SU-403 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information coreutils-8.29-lp150.2 is installed OR coreutils-lang-8.29-lp150.2 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information python3-virtualbox-6.0.10-lp151.2.6 is installed OR virtualbox-6.0.10-lp151.2.6 is installed OR virtualbox-devel-6.0.10-lp151.2.6 is installed OR virtualbox-guest-desktop-icons-6.0.10-lp151.2.6 is installed OR virtualbox-guest-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6 is installed OR virtualbox-guest-source-6.0.10-lp151.2.6 is installed OR virtualbox-guest-tools-6.0.10-lp151.2.6 is installed OR virtualbox-guest-x11-6.0.10-lp151.2.6 is installed OR virtualbox-host-kmp-default-6.0.10_k4.12.14_lp151.28.10-lp151.2.6 is installed OR virtualbox-host-source-6.0.10-lp151.2.6 is installed OR virtualbox-qt-6.0.10-lp151.2.6 is installed OR virtualbox-vnc-6.0.10-lp151.2.6 is installed OR virtualbox-websrv-6.0.10-lp151.2.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information xen-4.1.4_02-0.5 is installed OR xen-doc-html-4.1.4_02-0.5 is installed OR xen-doc-pdf-4.1.4_02-0.5 is installed OR xen-kmp-default-4.1.4_02_3.0.58_0.6.6-0.5 is installed OR xen-kmp-pae-4.1.4_02_3.0.58_0.6.6-0.5 is installed OR xen-kmp-trace-4.1.4_02_3.0.58_0.6.6-0.5 is installed OR xen-libs-4.1.4_02-0.5 is installed OR xen-libs-32bit-4.1.4_02-0.5 is installed OR xen-tools-4.1.4_02-0.5 is installed OR xen-tools-domU-4.1.4_02-0.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND cabextract-1.2-2.12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information gtk2-2.18.9-0.35 is installed OR gtk2-32bit-2.18.9-0.35 is installed OR gtk2-lang-2.18.9-0.35 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information curl-7.37.0-31 is installed OR libcurl4-7.37.0-31 is installed OR libcurl4-32bit-7.37.0-31 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND libzypp-16.21.2-2.45 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information perl-Cyrus-IMAP-2.3.18-35 is installed OR perl-Cyrus-SIEVE-managesieve-2.3.18-35 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_48-default-10-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-10-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-10-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_nss-1.0.14-18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND kgraft-patch-4_4_121-92_146-default-3-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_120-92_70-default-6-2 is installed OR kgraft-patch-SLE12-SP2_Update_20-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information gpg2-2.0.24-8 is installed OR gpg2-lang-2.0.24-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libseccomp-2.4.1-11.3 is installed OR libseccomp2-2.4.1-11.3 is installed OR libseccomp2-32bit-2.4.1-11.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information xen-4.9.4_04-3.56 is installed OR xen-doc-html-4.9.4_04-3.56 is installed OR xen-libs-4.9.4_04-3.56 is installed OR xen-libs-32bit-4.9.4_04-3.56 is installed OR xen-tools-4.9.4_04-3.56 is installed OR xen-tools-domU-4.9.4_04-3.56 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libblkid1-2.29.2-3.12 is installed OR libblkid1-32bit-2.29.2-3.12 is installed OR libfdisk1-2.29.2-3.12 is installed OR libmount1-2.29.2-3.12 is installed OR libmount1-32bit-2.29.2-3.12 is installed OR libsmartcols1-2.29.2-3.12 is installed OR libuuid1-2.29.2-3.12 is installed OR libuuid1-32bit-2.29.2-3.12 is installed OR python-libmount-2.29.2-3.12 is installed OR util-linux-2.29.2-3.12 is installed OR util-linux-lang-2.29.2-3.12 is installed OR util-linux-systemd-2.29.2-3.12 is installed OR uuidd-2.29.2-3.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-alsa-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-jdbc-1.7.1_sr4.30-38.26 is installed OR java-1_7_1-ibm-plugin-1.7.1_sr4.30-38.26 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information libopenssl1_0_0-1.0.1i-54.8 is installed OR libopenssl1_0_0-32bit-1.0.1i-54.8 is installed OR libopenssl1_0_0-hmac-1.0.1i-54.8 is installed OR libopenssl1_0_0-hmac-32bit-1.0.1i-54.8 is installed OR openssl-1.0.1i-54.8 is installed OR openssl-doc-1.0.1i-54.8 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND Package Information curl-7.37.0-37.23 is installed OR libcurl4-7.37.0-37.23 is installed OR libcurl4-32bit-7.37.0-37.23 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND Package Information MozillaFirefox-68.2.0-109.95 is installed OR MozillaFirefox-translations-common-68.2.0-109.95 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information icu-52.1-8.10 is installed OR libicu-doc-52.1-8.10 is installed OR libicu52_1-52.1-8.10 is installed OR libicu52_1-32bit-52.1-8.10 is installed OR libicu52_1-data-52.1-8.10 is installed
BACK