Oval Definition:oval:org.opensuse.security:def:60714
Revision Date:2020-12-01Version:1
Title:Security update for the Linux Kernel (Important)
Description:

The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2020-10768: Fixed an issue with the prctl() function which could have allowed indirect branch speculation even after it has been disabled (bsc#1172783). - CVE-2020-10767: Fixed an issue where the Indirect Branch Prediction Barrier (IBPB) would have been disabled when STIBP is unavailable or enhanced IBRS is available making the system vulnerable to spectre v2 (bsc#1172782). - CVE-2020-10766: Fixed an issue with Linux scheduler which could have allowed an attacker to turn off the SSBD protection (bsc#1172781).

- xfs: Fix tail rounding in xfs_alloc_file_space() (bsc#1172049).
Family:unixClass:patch
Status:Reference(s):1064127
1068032
1089039
1101246
1101470
1104199
1104202
1104789
1106197
1110850
1137825
1153108
1156317
1156321
1156331
1157770
1158763
1160467
1160468
1163019
1165439
1170603
1172049
1172781
1172782
1172783
1172906
1172935
1173197
1174543
1178171
1178387
945190
997043
CVE-2014-3577
CVE-2015-5262
CVE-2017-15638
CVE-2017-5715
CVE-2018-0737
CVE-2018-10915
CVE-2018-10925
CVE-2018-11784
CVE-2018-20856
CVE-2019-10220
CVE-2019-12387
CVE-2019-13272
CVE-2019-14896
CVE-2019-14897
CVE-2019-15239
CVE-2019-18900
CVE-2020-10766
CVE-2020-10767
CVE-2020-10768
CVE-2020-12268
CVE-2020-14093
CVE-2020-14154
CVE-2020-14954
CVE-2020-1747
CVE-2020-25692
CVE-2020-8608
SUSE-SU-2017:2935-1
SUSE-SU-2018:0008-1
SUSE-SU-2019:2066-1
SUSE-SU-2019:3228-1
SUSE-SU-2020:0079-2
SUSE-SU-2020:1212-1
SUSE-SU-2020:1285-1
SUSE-SU-2020:1713-1
SUSE-SU-2020:2171-1
SUSE-SU-2020:3149-1
SUSE-SU-2020:3314-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
openSUSE Leap 15.2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP4-ESPOS
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud 9
SUSE OpenStack Cloud Crowbar 8
SUSE OpenStack Cloud Crowbar 9
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • axis-1.4-lp150.6 is installed
  • OR axis-javadoc-1.4-297 is installed
  • OR axis-manual-1.4-lp150.6 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND Package Information
  • libvlc5-3.0.7.1-lp151.6.3 is installed
  • OR libvlccore9-3.0.7.1-lp151.6.3 is installed
  • OR vlc-3.0.7.1-lp151.6.3 is installed
  • OR vlc-codec-gstreamer-3.0.7.1-lp151.6.3 is installed
  • OR vlc-devel-3.0.7.1-lp151.6.3 is installed
  • OR vlc-jack-3.0.7.1-lp151.6.3 is installed
  • OR vlc-lang-3.0.7.1-lp151.6.3 is installed
  • OR vlc-noX-3.0.7.1-lp151.6.3 is installed
  • OR vlc-qt-3.0.7.1-lp151.6.3 is installed
  • OR vlc-vdpau-3.0.7.1-lp151.6.3 is installed
    • Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • MozillaFirefox-78.0.1-lp152.2.5 is installed
  • OR MozillaFirefox-branding-upstream-78.0.1-lp152.2.5 is installed
  • OR MozillaFirefox-buildsymbols-78.0.1-lp152.2.5 is installed
  • OR MozillaFirefox-devel-78.0.1-lp152.2.5 is installed
  • OR MozillaFirefox-translations-common-78.0.1-lp152.2.5 is installed
  • OR MozillaFirefox-translations-other-78.0.1-lp152.2.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND SuSEfirewall2-3.6.312.333-3.10 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • ghostscript-9.52-23.34 is installed
  • OR ghostscript-x11-9.52-23.34 is installed
  • OR libspectre-0.2.7-12.10 is installed
  • OR libspectre1-0.2.7-12.10 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND mutt-1.10.1-55.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_180-94_97-default-6-2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_26-6-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • libopenssl-devel-1.0.2j-60.39 is installed
  • OR libopenssl1_0_0-1.0.2j-60.39 is installed
  • OR libopenssl1_0_0-32bit-1.0.2j-60.39 is installed
  • OR libopenssl1_0_0-hmac-1.0.2j-60.39 is installed
  • OR libopenssl1_0_0-hmac-32bit-1.0.2j-60.39 is installed
  • OR openssl-1.0.2j-60.39 is installed
  • OR openssl-doc-1.0.2j-60.39 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • bzip2-1.0.6-29 is installed
  • OR bzip2-doc-1.0.6-29 is installed
  • OR libbz2-1-1.0.6-29 is installed
  • OR libbz2-1-32bit-1.0.6-29 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4-ESPOS is installed
  • AND Package Information
  • ghostscript-9.52-23.39 is installed
  • OR ghostscript-x11-9.52-23.39 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • kernel-default-4.4.180-94.124 is installed
  • OR kernel-default-base-4.4.180-94.124 is installed
  • OR kernel-default-devel-4.4.180-94.124 is installed
  • OR kernel-default-kgraft-4.4.180-94.124 is installed
  • OR kernel-devel-4.4.180-94.124 is installed
  • OR kernel-macros-4.4.180-94.124 is installed
  • OR kernel-source-4.4.180-94.124 is installed
  • OR kernel-syms-4.4.180-94.124 is installed
  • OR kgraft-patch-4_4_180-94_124-default-1-4.3 is installed
  • OR kgraft-patch-SLE12-SP3_Update_33-1-4.3 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 9 is installed
  • AND Package Information
  • ardana-ansible-9.0+git.1581611758.f694f7d-3.16 is installed
  • OR ardana-cinder-9.0+git.1579256229.c8b4b38-3.10 is installed
  • OR ardana-cobbler-9.0+git.1574950066.a3c4be4-3.10 is installed
  • OR ardana-db-9.0+git.1578936438.b9a9b95-3.16 is installed
  • OR ardana-horizon-9.0+git.1575562864.8ed5e10-3.13 is installed
  • OR ardana-input-model-9.0+git.1580403439.d425462-3.13 is installed
  • OR ardana-monasca-9.0+git.1579273481.4b8c46f-3.13 is installed
  • OR ardana-mq-9.0+git.1581024903.8e74867-3.10 is installed
  • OR ardana-nova-9.0+git.1580304673.6c668eb-3.16 is installed
  • OR ardana-octavia-9.0+git.1576074489.62de7e2-3.13 is installed
  • OR ardana-osconfig-9.0+git.1580235830.0dca223-3.13 is installed
  • OR ardana-tempest-9.0+git.1578932816.e299c08-3.10 is installed
  • OR ardana-tls-9.0+git.1575296665.3fdfe45-3.9 is installed
  • OR keepalived-2.0.19-3.3 is installed
  • OR openstack-barbican-7.0.1~dev24-3.6 is installed
  • OR openstack-barbican-api-7.0.1~dev24-3.6 is installed
  • OR openstack-barbican-keystone-listener-7.0.1~dev24-3.6 is installed
  • OR openstack-barbican-retry-7.0.1~dev24-3.6 is installed
  • OR openstack-barbican-worker-7.0.1~dev24-3.6 is installed
  • OR openstack-ceilometer-11.0.2~dev21-3.10 is installed
  • OR openstack-ceilometer-agent-central-11.0.2~dev21-3.10 is installed
  • OR openstack-ceilometer-agent-compute-11.0.2~dev21-3.10 is installed
  • OR openstack-ceilometer-agent-ipmi-11.0.2~dev21-3.10 is installed
  • OR openstack-ceilometer-agent-notification-11.0.2~dev21-3.10 is installed
  • OR openstack-ceilometer-polling-11.0.2~dev21-3.10 is installed
  • OR openstack-cinder-13.0.9~dev11-3.16 is installed
  • OR openstack-cinder-api-13.0.9~dev11-3.16 is installed
  • OR openstack-cinder-backup-13.0.9~dev11-3.16 is installed
  • OR openstack-cinder-scheduler-13.0.9~dev11-3.16 is installed
  • OR openstack-cinder-volume-13.0.9~dev11-3.16 is installed
  • OR openstack-dashboard-14.1.1~dev1-3.12 is installed
  • OR openstack-dashboard-theme-SUSE-2018.2+git.1555335229.5c8dec9-3.3 is installed
  • OR openstack-designate-7.0.1~dev23-3.13 is installed
  • OR openstack-designate-agent-7.0.1~dev23-3.13 is installed
  • OR openstack-designate-api-7.0.1~dev23-3.13 is installed
  • OR openstack-designate-central-7.0.1~dev23-3.13 is installed
  • OR openstack-designate-producer-7.0.1~dev23-3.13 is installed
  • OR openstack-designate-sink-7.0.1~dev23-3.13 is installed
  • OR openstack-designate-worker-7.0.1~dev23-3.13 is installed
  • OR openstack-heat-11.0.3~dev31-3.13 is installed
  • OR openstack-heat-api-11.0.3~dev31-3.13 is installed
  • OR openstack-heat-api-cfn-11.0.3~dev31-3.13 is installed
  • OR openstack-heat-engine-11.0.3~dev31-3.13 is installed
  • OR openstack-heat-plugin-heat_docker-11.0.3~dev31-3.13 is installed
  • OR openstack-horizon-plugin-designate-ui-7.0.1~dev8-3.6 is installed
  • OR openstack-horizon-plugin-ironic-ui-3.3.1~dev14-3.3 is installed
  • OR openstack-horizon-plugin-neutron-lbaas-ui-5.0.1~dev8-11 is installed
  • OR openstack-horizon-plugin-octavia-ui-2.0.2~dev1-1.3 is installed
  • OR openstack-ironic-11.1.4~dev22-3.13 is installed
  • OR openstack-ironic-api-11.1.4~dev22-3.13 is installed
  • OR openstack-ironic-conductor-11.1.4~dev22-3.13 is installed
  • OR openstack-ironic-python-agent-3.3.3~dev6-3.13 is installed
  • OR openstack-keystone-14.1.1~dev36-3.19 is installed
  • OR openstack-magnum-7.2.1~dev1-3.10 is installed
  • OR openstack-magnum-api-7.2.1~dev1-3.10 is installed
  • OR openstack-magnum-conductor-7.2.1~dev1-3.10 is installed
  • OR openstack-monasca-agent-2.8.1~dev13-3.6 is installed
  • OR openstack-neutron-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-dhcp-agent-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-fwaas-13.0.3~dev4-3.9 is installed
  • OR openstack-neutron-gbp-5.0.1~dev491-3.16 is installed
  • OR openstack-neutron-ha-tool-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-l3-agent-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-linuxbridge-agent-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-macvtap-agent-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-metadata-agent-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-metering-agent-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-openvswitch-agent-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-server-13.0.7~dev48-3.19 is installed
  • OR openstack-neutron-vpnaas-13.0.2~dev6-3.6 is installed
  • OR openstack-neutron-vyatta-agent-13.0.2~dev6-3.6 is installed
  • OR openstack-nova-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-api-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-cells-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-compute-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-conductor-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-console-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-novncproxy-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-placement-api-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-scheduler-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-serialproxy-18.2.4~dev63-3.19 is installed
  • OR openstack-nova-vncproxy-18.2.4~dev63-3.19 is installed
  • OR openstack-octavia-3.2.2~dev8-3.19 is installed
  • OR openstack-octavia-amphora-agent-3.2.2~dev8-3.19 is installed
  • OR openstack-octavia-amphora-image-0.1.2-7.6 is installed
  • OR openstack-octavia-amphora-image-x86_64-0.1.2-7.6 is installed
  • OR openstack-octavia-api-3.2.2~dev8-3.19 is installed
  • OR openstack-octavia-health-manager-3.2.2~dev8-3.19 is installed
  • OR openstack-octavia-housekeeping-3.2.2~dev8-3.19 is installed
  • OR openstack-octavia-worker-3.2.2~dev8-3.19 is installed
  • OR openstack-sahara-9.0.2~dev15-3.9 is installed
  • OR openstack-sahara-api-9.0.2~dev15-3.9 is installed
  • OR openstack-sahara-engine-9.0.2~dev15-3.9 is installed
  • OR openstack-swift-2.19.2~dev48-3.3 is installed
  • OR openstack-swift-account-2.19.2~dev48-3.3 is installed
  • OR openstack-swift-container-2.19.2~dev48-3.3 is installed
  • OR openstack-swift-object-2.19.2~dev48-3.3 is installed
  • OR openstack-swift-proxy-2.19.2~dev48-3.3 is installed
  • OR python-amqp-2.4.2-4.3 is installed
  • OR python-barbican-7.0.1~dev24-3.6 is installed
  • OR python-ceilometer-11.0.2~dev21-3.10 is installed
  • OR python-cinder-13.0.9~dev11-3.16 is installed
  • OR python-designate-7.0.1~dev23-3.13 is installed
  • OR python-heat-11.0.3~dev31-3.13 is installed
  • OR python-horizon-14.1.1~dev1-3.12 is installed
  • OR python-horizon-plugin-designate-ui-7.0.1~dev8-3.6 is installed
  • OR python-horizon-plugin-ironic-ui-3.3.1~dev14-3.3 is installed
  • OR python-horizon-plugin-neutron-lbaas-ui-5.0.1~dev8-11 is installed
  • OR python-horizon-plugin-octavia-ui-2.0.2~dev1-1.3 is installed
  • OR python-ironic-11.1.4~dev22-3.13 is installed
  • OR python-ironic-lib-2.14.2-3.3 is installed
  • OR python-keystone-14.1.1~dev36-3.19 is installed
  • OR python-keystoneauth1-3.10.1~dev10-3.3 is installed
  • OR python-keystoneclient-3.17.1~dev5-3.3 is installed
  • OR python-keystoneclient-doc-3.17.1~dev5-3.3 is installed
  • OR python-keystonemiddleware-5.2.2~dev3-14 is installed
  • OR python-magnum-7.2.1~dev1-3.10 is installed
  • OR python-monasca-agent-2.8.1~dev13-3.6 is installed
  • OR python-neutron-13.0.7~dev48-3.19 is installed
  • OR python-neutron-fwaas-13.0.3~dev4-3.9 is installed
  • OR python-neutron-gbp-5.0.1~dev491-3.16 is installed
  • OR python-neutron-vpnaas-13.0.2~dev6-3.6 is installed
  • OR python-nova-18.2.4~dev63-3.19 is installed
  • OR python-octavia-3.2.2~dev8-3.19 is installed
  • OR python-openstack_auth-14.1.1~dev1-3.12 is installed
  • OR python-ovs-2.9.0-3.3 is installed
  • OR python-sahara-9.0.2~dev15-3.9 is installed
  • OR python-swift-2.19.2~dev48-3.3 is installed
  • OR supportutils-plugin-suse-openstack-cloud-9.0.1574431436.987b47d-3.6 is installed
  • OR venv-openstack-barbican-7.0.1~dev24-3.15 is installed
  • OR venv-openstack-barbican-x86_64-7.0.1~dev24-3.15 is installed
  • OR venv-openstack-cinder-13.0.9~dev11-3.15 is installed
  • OR venv-openstack-cinder-x86_64-13.0.9~dev11-3.15 is installed
  • OR venv-openstack-designate-7.0.1~dev23-3.15 is installed
  • OR venv-openstack-designate-x86_64-7.0.1~dev23-3.15 is installed
  • OR venv-openstack-glance-17.0.1~dev30-3.13 is installed
  • OR venv-openstack-glance-x86_64-17.0.1~dev30-3.13 is installed
  • OR venv-openstack-heat-11.0.3~dev31-3.15 is installed
  • OR venv-openstack-heat-x86_64-11.0.3~dev31-3.15 is installed
  • OR venv-openstack-horizon-14.1.1~dev1-4.14 is installed
  • OR venv-openstack-horizon-x86_64-14.1.1~dev1-4.14 is installed
  • OR venv-openstack-ironic-11.1.4~dev22-4.11 is installed
  • OR venv-openstack-ironic-x86_64-11.1.4~dev22-4.11 is installed
  • OR venv-openstack-keystone-14.1.1~dev36-3.15 is installed
  • OR venv-openstack-keystone-x86_64-14.1.1~dev36-3.15 is installed
  • OR venv-openstack-magnum-7.2.1~dev1-4.15 is installed
  • OR venv-openstack-magnum-x86_64-7.2.1~dev1-4.15 is installed
  • OR venv-openstack-manila-7.3.1~dev15-3.15 is installed
  • OR venv-openstack-manila-x86_64-7.3.1~dev15-3.15 is installed
  • OR venv-openstack-monasca-2.7.1~dev10-3.13 is installed
  • OR venv-openstack-monasca-ceilometer-1.8.2~dev3-3.15 is installed
  • OR venv-openstack-monasca-ceilometer-x86_64-1.8.2~dev3-3.15 is installed
  • OR venv-openstack-monasca-x86_64-2.7.1~dev10-3.13 is installed
  • OR venv-openstack-neutron-13.0.7~dev48-6.15 is installed
  • OR venv-openstack-neutron-x86_64-13.0.7~dev48-6.15 is installed
  • OR venv-openstack-nova-18.2.4~dev63-3.15 is installed
  • OR venv-openstack-nova-x86_64-18.2.4~dev63-3.15 is installed
  • OR venv-openstack-octavia-3.2.2~dev8-4.15 is installed
  • OR venv-openstack-octavia-x86_64-3.2.2~dev8-4.15 is installed
  • OR venv-openstack-sahara-9.0.2~dev15-3.15 is installed
  • OR venv-openstack-sahara-x86_64-9.0.2~dev15-3.15 is installed
  • OR venv-openstack-swift-2.19.2~dev48-2.10 is installed
  • OR venv-openstack-swift-x86_64-2.19.2~dev48-2.10 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND python-Twisted-15.2.1-9.5 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 9 is installed
  • AND Package Information
  • ruby2.1-rubygem-haml-4.0.6-3.3 is installed
  • OR rubygem-haml-4.0.6-3.3 is installed
    • BACK