Oval Definition:	oval:org.opensuse.security:def:68059
Revision Date: 2021-09-16 Version: 1 Title: Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_99 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1013708 1013712 1013893 1015171 1189278 1189418 1189420 CVE-2015-4680 CVE-2015-8763 CVE-2016-9797 CVE-2016-9798 CVE-2016-9802 CVE-2016-9917 CVE-2017-10978 CVE-2017-10983 CVE-2017-10984 CVE-2017-10985 CVE-2017-10986 CVE-2017-10987 CVE-2017-10988 CVE-2017-9148 CVE-2019-11234 CVE-2019-11235 CVE-2021-3653 CVE-2021-3656 CVE-2021-38198 SUSE-SU-2019:1353-2 Platform(s): SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Server Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 Product(s): Definition Synopsis SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed AND Package Information bluez-5.48-5.16 is installed OR libbluetooth3-5.48-5.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed AND Package Information freeradius-server-3.0.16-3.3 is installed OR freeradius-server-devel-3.0.16-3.3 is installed OR freeradius-server-krb5-3.0.16-3.3 is installed OR freeradius-server-ldap-3.0.16-3.3 is installed OR freeradius-server-libs-3.0.16-3.3 is installed OR freeradius-server-mysql-3.0.16-3.3 is installed OR freeradius-server-perl-3.0.16-3.3 is installed OR freeradius-server-postgresql-3.0.16-3.3 is installed OR freeradius-server-python-3.0.16-3.3 is installed OR freeradius-server-sqlite-3.0.16-3.3 is installed OR freeradius-server-utils-3.0.16-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_99-default-3-2.2 is installed
BACK