Oval Definition:oval:org.opensuse.security:def:57011
Revision Date:2021-06-04Version:1
Title:Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)
Description:

This update for the Linux Kernel 4.4.180-94_121 fixes several issues.

The following security issues were fixed:

- Fix a kernel warning during sysfs read (bsc#1186235) - CVE-2020-36322: An issue was discovered in the FUSE filesystem implementation in the Linux kernel aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and its incompleteness is tracked as CVE-2021-28950 (bsc#1184952). - CVE-2021-29154: BPF JIT compilers in the Linux kernel have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c (bsc#1184710)
Family:unixClass:patch
Status:Reference(s):1000998
1009966
1013669
1019016
1027038
1042910
1053153
1053352
1059554
1063269
1069708
1086598
1095218
1095219
1104205
1107832
1108963
1109209
1110233
1118277
1154862
1168874
1184710
1184952
1186235
910252
910253
913650
913651
917152
977410
996511
CVE-2004-2771
CVE-2009-2666
CVE-2010-1167
CVE-2011-1947
CVE-2011-3389
CVE-2012-3482
CVE-2014-7844
CVE-2014-8116
CVE-2014-8117
CVE-2014-9620
CVE-2014-9621
CVE-2014-9653
CVE-2016-2183
CVE-2016-7545
CVE-2016-9811
CVE-2017-10661
CVE-2017-12617
CVE-2017-16939
CVE-2017-5664
CVE-2017-7674
CVE-2018-11233
CVE-2018-11233
CVE-2018-11235
CVE-2018-11235
CVE-2018-14526
CVE-2018-14633
CVE-2018-14634
CVE-2018-17182
CVE-2018-19788
CVE-2018-3741
CVE-2019-17498
CVE-2020-36322
CVE-2020-6821
CVE-2020-6822
CVE-2020-6825
CVE-2020-6827
CVE-2020-6828
CVE-2021-29154
SUSE-SU-2017:0263-1
SUSE-SU-2017:0338-1
SUSE-SU-2017:0720-1
SUSE-SU-2017:3039-1
SUSE-SU-2017:3048-1
SUSE-SU-2017:3321-1
SUSE-SU-2018:1566-1
SUSE-SU-2018:3171-1
SUSE-SU-2019:0019-1
SUSE-SU-2019:1088-1
SUSE-SU-2019:2182-1
SUSE-SU-2019:2936-1
SUSE-SU-2020:0978-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • libpython2_7-1_0-2.7.14-lp150.5 is installed
  • OR python-base-2.7.14-lp150.5 is installed
  • OR python-xml-2.7.14-lp150.5 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • chromedriver-77.0.3865.75-lp151.2.30 is installed
  • OR chromium-77.0.3865.75-lp151.2.30 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • libpolkit0-0.113-5.15 is installed
  • OR libpolkit0-32bit-0.113-5.15 is installed
  • OR polkit-0.113-5.15 is installed
  • OR typelib-1_0-Polkit-1_0-0.113-5.15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • gstreamer-0_10-plugins-base-0.10.36-11.3 is installed
  • OR gstreamer-0_10-plugins-base-32bit-0.10.36-11.3 is installed
  • OR libgstapp-0_10-0-32bit-0.10.36-11.3 is installed
  • OR libgstinterfaces-0_10-0-32bit-0.10.36-11.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_67-60_64_21-default-12-2 is installed
  • OR kgraft-patch-3_12_67-60_64_21-xen-12-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_10-12-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • fetchmail-6.3.26-12 is installed
  • OR fetchmailconf-6.3.26-12 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • curl-7.37.0-37.23 is installed
  • OR libcurl4-7.37.0-37.23 is installed
  • OR libcurl4-32bit-7.37.0-37.23 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND ucode-intel-20180425-13.20 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_121-92_98-default-2-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_26-2-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • bash-4.3-82 is installed
  • OR bash-doc-4.3-82 is installed
  • OR libreadline6-6.3-82 is installed
  • OR libreadline6-32bit-6.3-82 is installed
  • OR readline-doc-6.3-82 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND squid-3.5.21-26.26 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • libshibsp-lite6-2.5.5-6.6 is installed
  • OR libshibsp6-2.5.5-6.6 is installed
  • OR shibboleth-sp-2.5.5-6.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND kgraft-patch-4_4_180-94_121-default-10-2.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libdcerpc-binding0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libdcerpc-binding0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libdcerpc0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libdcerpc0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-krb5pac0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-krb5pac0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-nbt0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-nbt0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-standard0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr-standard0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libndr0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libnetapi0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libnetapi0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-credentials0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-credentials0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-errors0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-errors0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-hostconfig0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-hostconfig0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-passdb0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-passdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-util0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamba-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamdb0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsamdb0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbclient0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbconf0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbconf0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbldap0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libsmbldap0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libtevent-util0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libtevent-util0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libwbclient0-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR libwbclient0-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-client-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-client-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-doc-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-libs-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-libs-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-winbind-4.6.14+git.157.c2d53c2b191-3.29 is installed
  • OR samba-winbind-32bit-4.6.14+git.157.c2d53c2b191-3.29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • libecpg6-10.6-1.6 is installed
  • OR libpq5-10.6-1.6 is installed
  • OR libpq5-32bit-10.6-1.6 is installed
  • OR postgresql10-10.6-1.6 is installed
  • OR postgresql10-contrib-10.6-1.6 is installed
  • OR postgresql10-docs-10.6-1.6 is installed
  • OR postgresql10-libs-10.6-1.6 is installed
  • OR postgresql10-server-10.6-1.6 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • git-2.12.3-27.14 is installed
  • OR git-core-2.12.3-27.14 is installed
  • OR git-doc-2.12.3-27.14 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • git-2.12.3-27.22 is installed
  • OR git-core-2.12.3-27.22 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • openstack-aodh-5.1.1~dev5-3.5 is installed
  • OR openstack-aodh-api-5.1.1~dev5-3.5 is installed
  • OR openstack-aodh-doc-5.1.1~dev5-3.5 is installed
  • OR openstack-aodh-evaluator-5.1.1~dev5-3.5 is installed
  • OR openstack-aodh-expirer-5.1.1~dev5-3.5 is installed
  • OR openstack-aodh-listener-5.1.1~dev5-3.5 is installed
  • OR openstack-aodh-notifier-5.1.1~dev5-3.5 is installed
  • OR openstack-barbican-5.0.1~dev11-3.8 is installed
  • OR openstack-barbican-api-5.0.1~dev11-3.8 is installed
  • OR openstack-barbican-doc-5.0.1~dev11-3.8 is installed
  • OR openstack-barbican-keystone-listener-5.0.1~dev11-3.8 is installed
  • OR openstack-barbican-retry-5.0.1~dev11-3.8 is installed
  • OR openstack-barbican-worker-5.0.1~dev11-3.8 is installed
  • OR openstack-cinder-11.1.2~dev14-3.6 is installed
  • OR openstack-cinder-api-11.1.2~dev14-3.6 is installed
  • OR openstack-cinder-backup-11.1.2~dev14-3.6 is installed
  • OR openstack-cinder-doc-11.1.2~dev14-3.6 is installed
  • OR openstack-cinder-scheduler-11.1.2~dev14-3.6 is installed
  • OR openstack-cinder-volume-11.1.2~dev14-3.6 is installed
  • OR openstack-dashboard-12.0.4~dev1-3.8 is installed
  • OR openstack-designate-5.0.2~dev5-3.5 is installed
  • OR openstack-designate-agent-5.0.2~dev5-3.5 is installed
  • OR openstack-designate-api-5.0.2~dev5-3.5 is installed
  • OR openstack-designate-central-5.0.2~dev5-3.5 is installed
  • OR openstack-designate-doc-5.0.2~dev5-3.5 is installed
  • OR openstack-designate-producer-5.0.2~dev5-3.5 is installed
  • OR openstack-designate-sink-5.0.2~dev5-3.5 is installed
  • OR openstack-designate-worker-5.0.2~dev5-3.5 is installed
  • OR openstack-glance-15.0.2~dev4-3.3 is installed
  • OR openstack-glance-api-15.0.2~dev4-3.3 is installed
  • OR openstack-glance-doc-15.0.2~dev4-3.3 is installed
  • OR openstack-glance-registry-15.0.2~dev4-3.3 is installed
  • OR openstack-heat-9.0.5~dev11-3.6 is installed
  • OR openstack-heat-api-9.0.5~dev11-3.6 is installed
  • OR openstack-heat-api-cfn-9.0.5~dev11-3.6 is installed
  • OR openstack-heat-api-cloudwatch-9.0.5~dev11-3.6 is installed
  • OR openstack-heat-doc-9.0.5~dev11-3.6 is installed
  • OR openstack-heat-engine-9.0.5~dev11-3.6 is installed
  • OR openstack-heat-plugin-heat_docker-9.0.5~dev11-3.6 is installed
  • OR openstack-heat-templates-0.0.0+git.1525957319.6b5a7cd-3.3 is installed
  • OR openstack-heat-test-9.0.5~dev11-3.6 is installed
  • OR openstack-horizon-plugin-designate-ui-5.0.2~dev5-3.3 is installed
  • OR openstack-horizon-plugin-freezer-ui-5.0.1~dev6-3.3 is installed
  • OR openstack-horizon-plugin-gbp-ui-5.0.1~dev21-4.3 is installed
  • OR openstack-horizon-plugin-manila-ui-2.10.3~dev4-4.5 is installed
  • OR openstack-horizon-plugin-neutron-lbaas-ui-3.0.3~dev2-3.5 is installed
  • OR openstack-horizon-plugin-trove-ui-9.0.1~dev7-3.3 is installed
  • OR openstack-ironic-9.1.5~dev7-3.6 is installed
  • OR openstack-ironic-api-9.1.5~dev7-3.6 is installed
  • OR openstack-ironic-conductor-9.1.5~dev7-3.6 is installed
  • OR openstack-ironic-doc-9.1.5~dev7-3.6 is installed
  • OR openstack-keystone-12.0.1~dev19-5.8 is installed
  • OR openstack-keystone-doc-12.0.1~dev19-5.8 is installed
  • OR openstack-manila-5.0.2~dev55-3.6 is installed
  • OR openstack-manila-api-5.0.2~dev55-3.6 is installed
  • OR openstack-manila-data-5.0.2~dev55-3.6 is installed
  • OR openstack-manila-doc-5.0.2~dev55-3.6 is installed
  • OR openstack-manila-scheduler-5.0.2~dev55-3.6 is installed
  • OR openstack-manila-share-5.0.2~dev55-3.6 is installed
  • OR openstack-neutron-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-dhcp-agent-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-doc-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-fwaas-11.0.2~dev7-3.5 is installed
  • OR openstack-neutron-fwaas-doc-11.0.2~dev7-3.5 is installed
  • OR openstack-neutron-ha-tool-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-l3-agent-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-lbaas-11.0.4~dev4-3.3 is installed
  • OR openstack-neutron-lbaas-agent-11.0.4~dev4-3.3 is installed
  • OR openstack-neutron-lbaas-doc-11.0.4~dev4-3.3 is installed
  • OR openstack-neutron-linuxbridge-agent-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-macvtap-agent-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-metadata-agent-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-metering-agent-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-openvswitch-agent-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-server-11.0.6~dev63-3.6 is installed
  • OR openstack-neutron-vpn-agent-11.0.1~dev1-3.3 is installed
  • OR openstack-neutron-vpnaas-11.0.1~dev1-3.3 is installed
  • OR openstack-neutron-vpnaas-doc-11.0.1~dev1-3.3 is installed
  • OR openstack-neutron-vyatta-agent-11.0.1~dev1-3.3 is installed
  • OR openstack-neutron-zvm-agent-8.0.1~dev12-4.3 is installed
  • OR openstack-nova-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-api-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-cells-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-compute-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-conductor-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-console-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-consoleauth-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-doc-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-novncproxy-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-placement-api-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-scheduler-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-serialproxy-16.1.5~dev49-3.8 is installed
  • OR openstack-nova-virt-zvm-8.0.1~dev56-3.3 is installed
  • OR openstack-nova-vncproxy-16.1.5~dev49-3.8 is installed
  • OR openstack-octavia-1.0.3~dev21-4.6 is installed
  • OR openstack-octavia-amphora-agent-1.0.3~dev21-4.6 is installed
  • OR openstack-octavia-api-1.0.3~dev21-4.6 is installed
  • OR openstack-octavia-health-manager-1.0.3~dev21-4.6 is installed
  • OR openstack-octavia-housekeeping-1.0.3~dev21-4.6 is installed
  • OR openstack-octavia-worker-1.0.3~dev21-4.6 is installed
  • OR openstack-trove-8.0.1~dev11-3.3 is installed
  • OR openstack-trove-api-8.0.1~dev11-3.3 is installed
  • OR openstack-trove-conductor-8.0.1~dev11-3.3 is installed
  • OR openstack-trove-doc-8.0.1~dev11-3.3 is installed
  • OR openstack-trove-guestagent-8.0.1~dev11-3.3 is installed
  • OR openstack-trove-taskmanager-8.0.1~dev11-3.3 is installed
  • OR python-aodh-5.1.1~dev5-3.5 is installed
  • OR python-barbican-5.0.1~dev11-3.8 is installed
  • OR python-barbicanclient-4.5.2-4.3 is installed
  • OR python-barbicanclient-doc-4.5.2-4.3 is installed
  • OR python-cinder-11.1.2~dev14-3.6 is installed
  • OR python-designate-5.0.2~dev5-3.5 is installed
  • OR python-glance-15.0.2~dev4-3.3 is installed
  • OR python-heat-9.0.5~dev11-3.6 is installed
  • OR python-horizon-12.0.4~dev1-3.8 is installed
  • OR python-horizon-plugin-designate-ui-5.0.2~dev5-3.3 is installed
  • OR python-horizon-plugin-freezer-ui-5.0.1~dev6-3.3 is installed
  • OR python-horizon-plugin-gbp-ui-5.0.1~dev21-4.3 is installed
  • OR python-horizon-plugin-manila-ui-2.10.3~dev4-4.5 is installed
  • OR python-horizon-plugin-neutron-lbaas-ui-3.0.3~dev2-3.5 is installed
  • OR python-horizon-plugin-trove-ui-9.0.1~dev7-3.3 is installed
  • OR python-ironic-9.1.5~dev7-3.6 is installed
  • OR python-keystone-12.0.1~dev19-5.8 is installed
  • OR python-keystone-json-assignment-0.0.2-3.3 is installed
  • OR python-manila-5.0.2~dev55-3.6 is installed
  • OR python-manilaclient-1.17.3-3.3 is installed
  • OR python-manilaclient-doc-1.17.3-3.3 is installed
  • OR python-neutron-11.0.6~dev63-3.6 is installed
  • OR python-neutron-fwaas-11.0.2~dev7-3.5 is installed
  • OR python-neutron-lbaas-11.0.4~dev4-3.3 is installed
  • OR python-neutron-vpnaas-11.0.1~dev1-3.3 is installed
  • OR python-nova-16.1.5~dev49-3.8 is installed
  • OR python-octavia-1.0.3~dev21-4.6 is installed
  • OR python-trove-8.0.1~dev11-3.3 is installed
  • OR python-vmware-nsx-11.0.3~dev16-3.3 is installed
  • OR python-vmware-nsxlib-11.0.4~dev7-3.3 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND python-Django1-1.11.20-3.6 is installed
    • BACK