Oval Definition:	oval:org.opensuse.security:def:6698
Revision Date: 2021-08-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 23 for SLE 15) (Important) Description: This update for the Linux Kernel 4.12.14-150_69 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482). - CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838). - CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215). Family: unix Class: patch Status: Reference(s): 1186483 1188323 1188842 CVE-2009-2666 CVE-2010-0750 CVE-2010-1167 CVE-2011-0707 CVE-2011-1485 CVE-2011-1761 CVE-2011-1947 CVE-2011-2485 CVE-2011-3389 CVE-2012-3482 CVE-2013-2062 CVE-2013-3571 CVE-2013-4233 CVE-2013-4234 CVE-2013-4288 CVE-2014-0019 CVE-2014-7300 CVE-2015-2775 CVE-2015-3218 CVE-2015-3255 CVE-2015-3256 CVE-2015-3294 CVE-2015-4000 CVE-2015-4491 CVE-2015-4625 CVE-2015-7552 CVE-2015-7673 CVE-2015-7674 CVE-2015-8899 CVE-2016-1521 CVE-2016-1523 CVE-2016-1526 CVE-2016-1602 CVE-2016-5759 CVE-2016-6352 CVE-2016-6354 CVE-2016-6893 CVE-2017-1000422 CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496 CVE-2017-15107 CVE-2017-16852 CVE-2017-2579 CVE-2017-2580 CVE-2017-2581 CVE-2017-2586 CVE-2017-2587 CVE-2017-2862 CVE-2017-2870 CVE-2017-5436 CVE-2017-6312 CVE-2017-6313 CVE-2017-6314 CVE-2018-0618 CVE-2018-1116 CVE-2018-13796 CVE-2018-19636 CVE-2018-19637 CVE-2018-19638 CVE-2018-19639 CVE-2018-19640 CVE-2018-19788 CVE-2018-5950 CVE-2018-8975 CVE-2019-6133 CVE-2019-6446 CVE-2021-22543 CVE-2021-3609 CVE-2021-37576 Platform(s): openSUSE 13.1 openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Live Patching 15 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Point of Sale 12 SP2 SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT SUSE Linux Enterprise Real Time Extension 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP4 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for Rasperry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE OpenStack Cloud 5 Product(s): Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND clamav-0.97.8-0.2.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.5.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.36 is installed OR MozillaFirefox-translations-24.5.0esr-0.8.1 is installed OR libfreebl3-3.16-0.8.1 is installed OR libfreebl3-32bit-3.16-0.8.1 is installed OR libsoftokn3-3.16-0.8.1 is installed OR libsoftokn3-32bit-3.16-0.8.1 is installed OR mozilla-nspr-4.10.4-0.3.1 is installed OR mozilla-nspr-32bit-4.10.4-0.3.1 is installed OR mozilla-nss-3.16-0.8.1 is installed OR mozilla-nss-32bit-3.16-0.8.1 is installed OR mozilla-nss-tools-3.16-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information libssh-0.2-5.22.1 is installed OR libssh2-0.2-5.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information gpg2-2.0.24-3 is installed OR gpg2-lang-2.0.24-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information ghostscript-9.15-17 is installed OR ghostscript-x11-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libgraphite2-3-1.3.1-9 is installed OR libgraphite2-3-32bit-1.3.1-9 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.41.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.41.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2 is installed OR kgraft-patch-SLE12_Update_14-2-2 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND Package Information gnutls-2.4.1-24.39.60.1 is installed OR libgnutls-extra26-2.4.1-24.39.60.1 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND dnsmasq-2.78-18.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 is installed AND kernel-livepatch-4_12_14-150_69-default-8-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information cups154-1.5.4-2 is installed OR cups154-client-1.5.4-2 is installed OR cups154-filters-1.5.4-2 is installed OR cups154-libs-1.5.4-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information apache2-mod_php5-5.5.14-56 is installed OR php5-5.5.14-56 is installed OR php5-bcmath-5.5.14-56 is installed OR php5-bz2-5.5.14-56 is installed OR php5-calendar-5.5.14-56 is installed OR php5-ctype-5.5.14-56 is installed OR php5-curl-5.5.14-56 is installed OR php5-dba-5.5.14-56 is installed OR php5-dom-5.5.14-56 is installed OR php5-enchant-5.5.14-56 is installed OR php5-exif-5.5.14-56 is installed OR php5-fastcgi-5.5.14-56 is installed OR php5-fileinfo-5.5.14-56 is installed OR php5-fpm-5.5.14-56 is installed OR php5-ftp-5.5.14-56 is installed OR php5-gd-5.5.14-56 is installed OR php5-gettext-5.5.14-56 is installed OR php5-gmp-5.5.14-56 is installed OR php5-iconv-5.5.14-56 is installed OR php5-intl-5.5.14-56 is installed OR php5-json-5.5.14-56 is installed OR php5-ldap-5.5.14-56 is installed OR php5-mbstring-5.5.14-56 is installed OR php5-mcrypt-5.5.14-56 is installed OR php5-mysql-5.5.14-56 is installed OR php5-odbc-5.5.14-56 is installed OR php5-opcache-5.5.14-56 is installed OR php5-openssl-5.5.14-56 is installed OR php5-pcntl-5.5.14-56 is installed OR php5-pdo-5.5.14-56 is installed OR php5-pear-5.5.14-56 is installed OR php5-pgsql-5.5.14-56 is installed OR php5-phar-5.5.14-56 is installed OR php5-posix-5.5.14-56 is installed OR php5-pspell-5.5.14-56 is installed OR php5-shmop-5.5.14-56 is installed OR php5-snmp-5.5.14-56 is installed OR php5-soap-5.5.14-56 is installed OR php5-sockets-5.5.14-56 is installed OR php5-sqlite-5.5.14-56 is installed OR php5-suhosin-5.5.14-56 is installed OR php5-sysvmsg-5.5.14-56 is installed OR php5-sysvsem-5.5.14-56 is installed OR php5-sysvshm-5.5.14-56 is installed OR php5-tokenizer-5.5.14-56 is installed OR php5-wddx-5.5.14-56 is installed OR php5-xmlreader-5.5.14-56 is installed OR php5-xmlrpc-5.5.14-56 is installed OR php5-xmlwriter-5.5.14-56 is installed OR php5-xsl-5.5.14-56 is installed OR php5-zip-5.5.14-56 is installed OR php5-zlib-5.5.14-56 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information MozillaFirefox-45.6.0esr-62.1 is installed OR MozillaFirefox-translations-45.6.0esr-62.1 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2 is installed AND Package Information salt-2016.11.4-45 is installed OR salt-minion-2016.11.4-45 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.15-30.33 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.15-30.33 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP3 is installed AND Package Information kernel-rt-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt-base-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt-devel-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-base-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-devel-3.0.101.rt130-0.33.44.2 is installed OR kernel-source-rt-3.0.101.rt130-0.33.44.2 is installed OR kernel-syms-rt-3.0.101.rt130-0.33.44.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP4 is installed AND Package Information kernel-rt-3.0.101.rt130-48.1 is installed OR kernel-rt-base-3.0.101.rt130-48.1 is installed OR kernel-rt-devel-3.0.101.rt130-48.1 is installed OR kernel-rt_trace-3.0.101.rt130-48.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-48.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-48.1 is installed OR kernel-source-rt-3.0.101.rt130-48.1 is installed OR kernel-syms-rt-3.0.101.rt130-48.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.69-60.30 is installed OR kernel-compute-base-3.12.69-60.30 is installed OR kernel-compute-devel-3.12.69-60.30 is installed OR kernel-compute_debug-3.12.69-60.30 is installed OR kernel-compute_debug-devel-3.12.69-60.30 is installed OR kernel-devel-rt-3.12.69-60.30 is installed OR kernel-rt-3.12.69-60.30 is installed OR kernel-rt-base-3.12.69-60.30 is installed OR kernel-rt-devel-3.12.69-60.30 is installed OR kernel-rt_debug-3.12.69-60.30 is installed OR kernel-rt_debug-devel-3.12.69-60.30 is installed OR kernel-source-rt-3.12.69-60.30 is installed OR kernel-syms-rt-3.12.69-60.30 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information crash-7.1.5-15.3 is installed OR crash-kmp-rt-7.1.5_k4.4.21_6-15.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information NetworkManager-0.7.0.r4359-15.9.2 is installed OR NetworkManager-glib-0.7.0.r4359-15.9.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND Package Information puppet-0.24.8-1.3.5 is installed OR puppet-server-0.24.8-1.3.5 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND NetworkManager-gnome-0.7.1-5.22.28 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information xorg-x11-Xvnc-7.4-27.81.7 is installed OR xorg-x11-server-7.4-27.81.7 is installed OR xorg-x11-server-extra-7.4-27.81.7 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information PackageKit-0.3.14-2.30.11 is installed OR PackageKit-lang-0.3.14-2.30.11 is installed OR hal-0.5.12-23.76.1 is installed OR hal-32bit-0.5.12-23.76.1 is installed OR hal-doc-0.5.12-23.76.1 is installed OR hal-x86-0.5.12-23.76.1 is installed OR libpackagekit-glib10-0.3.14-2.30.11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information MozillaFirefox-31.1.0esr-1 is installed OR MozillaFirefox-translations-31.1.0esr-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information bind-9.9.6P1-30 is installed OR bind-chrootenv-9.9.6P1-30 is installed OR bind-doc-9.9.6P1-30 is installed OR bind-libs-9.9.6P1-30 is installed OR bind-libs-32bit-9.9.6P1-30 is installed OR bind-utils-9.9.6P1-30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information bind-9.9.9P1-46 is installed OR bind-chrootenv-9.9.9P1-46 is installed OR bind-doc-9.9.9P1-46 is installed OR bind-libs-9.9.9P1-46 is installed OR bind-libs-32bit-9.9.9P1-46 is installed OR bind-utils-9.9.9P1-46 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information fetchmail-6.3.26-12 is installed OR fetchmailconf-6.3.26-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND ant-1.9.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND SuSEfirewall2-3.6.312.333-3.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information libstorage-2.25.16.1-3.1 is installed OR libstorage-ruby-2.25.16.1-3.1 is installed OR libstorage5-2.25.16.1-3.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information qemu-2.6.2-31 is installed OR qemu-arm-2.6.2-31 is installed OR qemu-block-curl-2.6.2-31 is installed OR qemu-block-rbd-2.6.2-31 is installed OR qemu-block-ssh-2.6.2-31 is installed OR qemu-guest-agent-2.6.2-31 is installed OR qemu-ipxe-1.0.0-31 is installed OR qemu-lang-2.6.2-31 is installed OR qemu-tools-2.6.2-31 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information bytefx-data-mysql-2.6.7-0.9.1 is installed OR mono-core-2.6.7-0.9.1 is installed OR mono-data-2.6.7-0.9.1 is installed OR mono-data-firebird-2.6.7-0.9.1 is installed OR mono-data-oracle-2.6.7-0.9.1 is installed OR mono-data-postgresql-2.6.7-0.9.1 is installed OR mono-data-sqlite-2.6.7-0.9.1 is installed OR mono-data-sybase-2.6.7-0.9.1 is installed OR mono-devel-2.6.7-0.9.1 is installed OR mono-extras-2.6.7-0.9.1 is installed OR mono-jscript-2.6.7-0.9.1 is installed OR mono-locale-extras-2.6.7-0.9.1 is installed OR mono-nunit-2.6.7-0.9.1 is installed OR mono-wcf-2.6.7-0.9.1 is installed OR mono-web-2.6.7-0.9.1 is installed OR mono-winforms-2.6.7-0.9.1 is installed OR mono-winfxcore-2.6.7-0.9.1 is installed OR monodoc-core-2.6.7-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-devel-24.6.0esr-0.8.1 is installed OR mozilla-nspr-devel-4.10.6-0.3.1 is installed OR mozilla-nss-devel-3.16.1-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information libpcp3-3.6.10-0.3.1 is installed OR pcp-3.6.10-0.3.1 is installed OR pcp-devel-3.6.10-0.3.1 is installed OR pcp-import-iostat2pcp-3.6.10-0.3.1 is installed OR pcp-import-mrtg2pcp-3.6.10-0.3.1 is installed OR pcp-import-sar2pcp-3.6.10-0.3.1 is installed OR pcp-import-sheet2pcp-3.6.10-0.3.1 is installed OR perl-PCP-LogImport-3.6.10-0.3.1 is installed OR perl-PCP-LogSummary-3.6.10-0.3.1 is installed OR perl-PCP-MMV-3.6.10-0.3.1 is installed OR perl-PCP-PMDA-3.6.10-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information kernel-docs-3.12.51-52.34 is installed OR kernel-obs-build-3.12.51-52.34 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information krb5-1.12.1-22 is installed OR krb5-devel-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information gtk2-devel-2.24.31-7 is installed OR typelib-1_0-Gtk-2_0-2.24.31-7 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND automake-1.13.4-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information FastCGI-2.4.0-168 is installed OR FastCGI-devel-2.4.0-168 is installed OR perl-FastCGI-2.4.0-168 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libmysqlclient_r18-10.0.27-12 is installed OR libmysqlclient_r18-32bit-10.0.27-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information ImageMagick-6.8.8.1-70 is installed OR libMagick++-6_Q16-3-6.8.8.1-70 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-70 is installed
BACK