Oval Definition:	oval:org.opensuse.security:def:6848
Revision Date: 2020-12-07 Version: 1 Title: Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_56 fixes several issues. The following security issues were fixed: - CVE-2020-25668: Fixed a concurrency use-after-free in con_font_op (bsc#1178622). - CVE-2020-8694: Fixed an insufficient access control in the Linux kernel driver for some Intel(R) Processors which might have allowed an authenticated user to potentially enable information disclosure via local access (bsc#1178700). - CVE-2020-25705: Fixed a flaw which could have allowed an off-path remote user to effectively bypass source port UDP randomization (bsc#1178783). - Fixed an issue where system was hanging due to a massive amount of soft lockups in btrfs_drop_and_free_fs_root() (bsc#1178046). Family: unix Class: patch Status: Reference(s): 1178046 1178622 1178700 1178783 CVE-2009-2473 CVE-2009-2474 CVE-2009-4012 CVE-2010-1205 CVE-2010-4000 CVE-2011-1898 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 CVE-2011-3026 CVE-2011-3048 CVE-2011-3328 CVE-2011-3464 CVE-2012-0029 CVE-2012-0217 CVE-2012-0247 CVE-2012-0248 CVE-2012-0862 CVE-2012-1185 CVE-2012-1186 CVE-2012-2625 CVE-2012-3386 CVE-2012-3432 CVE-2012-3433 CVE-2012-4411 CVE-2012-4535 CVE-2012-4536 CVE-2012-4537 CVE-2012-4538 CVE-2012-4539 CVE-2012-4544 CVE-2012-5510 CVE-2012-5511 CVE-2012-5513 CVE-2012-5514 CVE-2012-5515 CVE-2012-5525 CVE-2012-5634 CVE-2012-6075 CVE-2013-0151 CVE-2013-0152 CVE-2013-0153 CVE-2013-1442 CVE-2013-1667 CVE-2013-1917 CVE-2013-1918 CVE-2013-1919 CVE-2013-1922 CVE-2013-1952 CVE-2013-1985 CVE-2013-2007 CVE-2013-3495 CVE-2013-4342 CVE-2013-4355 CVE-2013-4356 CVE-2013-4361 CVE-2013-4375 CVE-2013-4416 CVE-2013-4494 CVE-2013-4533 CVE-2013-4534 CVE-2013-4537 CVE-2013-4538 CVE-2013-4539 CVE-2013-4540 CVE-2013-4551 CVE-2013-4553 CVE-2013-4554 CVE-2014-0222 CVE-2014-3124 CVE-2014-3634 CVE-2014-3640 CVE-2014-3672 CVE-2014-5146 CVE-2014-5149 CVE-2014-6268 CVE-2014-7154 CVE-2014-7155 CVE-2014-7156 CVE-2014-7188 CVE-2014-7815 CVE-2015-1779 CVE-2015-3223 CVE-2015-3259 CVE-2015-3340 CVE-2015-3456 CVE-2015-4037 CVE-2015-4103 CVE-2015-4104 CVE-2015-4105 CVE-2015-4106 CVE-2015-5154 CVE-2015-5239 CVE-2015-5278 CVE-2015-5307 CVE-2015-5330 CVE-2015-6815 CVE-2015-6855 CVE-2015-7311 CVE-2015-7504 CVE-2015-7512 CVE-2015-7549 CVE-2015-7835 CVE-2015-7969 CVE-2015-7970 CVE-2015-7971 CVE-2015-7972 CVE-2015-8104 CVE-2015-8126 CVE-2015-8339 CVE-2015-8340 CVE-2015-8341 CVE-2015-8345 CVE-2015-8504 CVE-2015-8540 CVE-2015-8550 CVE-2015-8554 CVE-2015-8555 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8615 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-10013 CVE-2016-10024 CVE-2016-10025 CVE-2016-10087 CVE-2016-1568 CVE-2016-1570 CVE-2016-1571 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-2270 CVE-2016-2271 CVE-2016-2391 CVE-2016-2392 CVE-2016-2538 CVE-2016-2841 CVE-2016-4439 CVE-2016-4441 CVE-2016-5238 CVE-2016-5338 CVE-2016-6258 CVE-2016-6259 CVE-2016-6351 CVE-2016-7092 CVE-2016-7093 CVE-2016-7094 CVE-2016-7777 CVE-2016-7908 CVE-2016-7909 CVE-2016-8667 CVE-2016-8669 CVE-2016-8910 CVE-2016-9377 CVE-2016-9378 CVE-2016-9379 CVE-2016-9380 CVE-2016-9381 CVE-2016-9382 CVE-2016-9383 CVE-2016-9384 CVE-2016-9385 CVE-2016-9386 CVE-2016-9637 CVE-2016-9921 CVE-2016-9922 CVE-2016-9932 CVE-2017-0381 CVE-2017-10664 CVE-2017-11434 CVE-2017-12135 CVE-2017-12136 CVE-2017-12137 CVE-2017-12855 CVE-2017-14316 CVE-2017-14317 CVE-2017-14318 CVE-2017-14319 CVE-2017-15108 CVE-2017-15289 CVE-2017-15588 CVE-2017-15589 CVE-2017-15590 CVE-2017-15591 CVE-2017-15592 CVE-2017-15593 CVE-2017-15594 CVE-2017-15595 CVE-2017-15597 CVE-2017-16899 CVE-2017-17563 CVE-2017-17564 CVE-2017-17565 CVE-2017-17566 CVE-2017-18030 CVE-2017-2615 CVE-2017-2620 CVE-2017-5526 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2017-6505 CVE-2017-8309 CVE-2017-9330 CVE-2018-10471 CVE-2018-10472 CVE-2018-10981 CVE-2018-10982 CVE-2018-1140 CVE-2018-11806 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-12207 CVE-2018-12891 CVE-2018-12892 CVE-2018-12893 CVE-2018-14779 CVE-2018-14780 CVE-2018-15469 CVE-2018-15470 CVE-2018-17963 CVE-2018-18849 CVE-2018-18883 CVE-2018-19665 CVE-2018-19961 CVE-2018-19962 CVE-2018-19963 CVE-2018-19964 CVE-2018-19965 CVE-2018-19966 CVE-2018-19967 CVE-2018-20815 CVE-2018-3639 CVE-2018-3646 CVE-2018-3665 CVE-2018-5683 CVE-2018-7540 CVE-2018-7541 CVE-2018-7542 CVE-2018-8897 CVE-2019-11091 CVE-2019-11135 CVE-2019-12068 CVE-2019-14378 CVE-2019-15890 CVE-2019-17340 CVE-2019-17341 CVE-2019-17342 CVE-2019-17343 CVE-2019-17344 CVE-2019-17345 CVE-2019-17346 CVE-2019-17347 CVE-2019-17348 CVE-2019-17349 CVE-2019-18420 CVE-2019-18421 CVE-2019-18422 CVE-2019-18423 CVE-2019-18424 CVE-2019-18425 CVE-2019-3824 CVE-2019-6778 CVE-2019-9824 CVE-2020-25668 CVE-2020-25705 CVE-2020-8694 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise for SAP 12 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.51-60.20 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.8.0esr-0.13.2 is installed OR MozillaFirefox-translations-31.8.0esr-0.13.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libopenssl1_0_0-1.0.1i-44 is installed OR libopenssl1_0_0-32bit-1.0.1i-44 is installed OR openssl-1.0.1i-44 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information imap-2007e_suse-22 is installed OR libc-client2007e_suse-2007e_suse-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND syslog-service-2.0-778 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 is installed AND Package Information libmysqlclient-devel-10.0.30-20.26 is installed OR libmysqlclient18-10.0.30-20.26 is installed OR libmysqlclient18-32bit-10.0.30-20.26 is installed OR libmysqlclient_r18-10.0.30-20.26 is installed OR libmysqld-devel-10.0.30-20.26 is installed OR libmysqld18-10.0.30-20.26 is installed OR mariadb-10.0.30-20.26 is installed OR mariadb-client-10.0.30-20.26 is installed OR mariadb-errormessages-10.0.30-20.26 is installed OR mariadb-tools-10.0.30-20.26 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kernel-default-3.12.74-60.64.48 is installed OR kernel-default-base-3.12.74-60.64.48 is installed OR kernel-default-devel-3.12.74-60.64.48 is installed OR kernel-devel-3.12.74-60.64.48 is installed OR kernel-macros-3.12.74-60.64.48 is installed OR kernel-source-3.12.74-60.64.48 is installed OR kernel-syms-3.12.74-60.64.48 is installed OR kernel-xen-3.12.74-60.64.48 is installed OR kernel-xen-base-3.12.74-60.64.48 is installed OR kernel-xen-devel-3.12.74-60.64.48 is installed OR kgraft-patch-3_12_74-60_64_48-default-1-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-1-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-1-2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information libldb1-1.5.4-1 is installed OR libldb1-32bit-1.5.4-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_56-default-4-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information curl-7.19.0-11.21.1 is installed OR keyutils-libs-1.2-107.22 is installed OR keyutils-libs-32bit-1.2-107.22 is installed OR keyutils-libs-x86-1.2-107.22 is installed OR libcurl4-7.19.0-11.21.1 is installed OR libcurl4-32bit-7.19.0-11.21.1 is installed OR libcurl4-x86-7.19.0-11.21.1 is installed OR libidn-1.10-3.18 is installed OR libidn-32bit-1.10-3.18 is installed OR libidn-x86-1.10-3.18 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information MozillaFirefox-24.6.0esr-0.3.1 is installed OR MozillaFirefox-branding-SLED-24-0.4.10.24 is installed OR MozillaFirefox-translations-24.6.0esr-0.3.1 is installed OR libfreebl3-3.16.1-0.3.1 is installed OR libfreebl3-32bit-3.16.1-0.3.1 is installed OR mozilla-nspr-4.10.6-0.3.1 is installed OR mozilla-nspr-32bit-4.10.6-0.3.1 is installed OR mozilla-nss-3.16.1-0.3.1 is installed OR mozilla-nss-32bit-3.16.1-0.3.1 is installed OR mozilla-nss-tools-3.16.1-0.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND automake-1.10.1-4.131.9.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND automake-1.10.1-4.131.9.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND man-2.5.2-17.16 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information MozillaFirefox-31.5.3esr-0.3.1 is installed OR MozillaFirefox-translations-31.5.3esr-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND apache2-mod_perl-2.0.4-40.19 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information libproxy0-0.3.1-2.6.1 is installed OR libproxy0-32bit-0.3.1-2.6.1 is installed OR libproxy0-config-gnome-0.3.1-2.6.3 is installed OR libproxy0-config-kde4-0.3.1-2.6.3 is installed OR libproxy0-networkmanager-0.3.1-2.6.3 is installed OR libproxy0-x86-0.3.1-2.6.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache2-mod_perl-2.0.8-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information curl-7.37.0-15 is installed OR libcurl4-7.37.0-15 is installed OR libcurl4-32bit-7.37.0-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information xorg-x11-server-7.6_1.15.2-53.3.1 is installed OR xorg-x11-server-extra-7.6_1.15.2-53.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.13 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_14-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND wget-1.14-17 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information libgudev-1_0-0-210-70.58 is installed OR libgudev-1_0-0-32bit-210-70.58 is installed OR libudev1-210-70.58 is installed OR libudev1-32bit-210-70.58 is installed OR systemd-210-70.58 is installed OR systemd-32bit-210-70.58 is installed OR systemd-bash-completion-210-70.58 is installed OR systemd-sysvinit-210-70.58 is installed OR udev-210-70.58 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information git-1.7.12.4-0.5.1 is installed OR git-arch-1.7.12.4-0.5.1 is installed OR git-core-1.7.12.4-0.5.1 is installed OR git-cvs-1.7.12.4-0.5.1 is installed OR git-daemon-1.7.12.4-0.5.1 is installed OR git-email-1.7.12.4-0.5.1 is installed OR git-gui-1.7.12.4-0.5.1 is installed OR git-svn-1.7.12.4-0.5.1 is installed OR git-web-1.7.12.4-0.5.1 is installed OR gitk-1.7.12.4-0.5.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND apache2-mod_fcgid-2.2-31.27.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information PackageKit-devel-0.3.14-2.30.11 is installed OR hal-devel-0.5.12-23.76.1 is installed OR libpackagekit-glib10-devel-0.3.14-2.30.11 is installed OR libpackagekit-qt10-0.3.14-2.30.11 is installed OR libpackagekit-qt10-devel-0.3.14-2.30.11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND mercurial-2.8.2-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libarchive-3.1.2-25 is installed OR libarchive-devel-3.1.2-25 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information binutils-devel-2.26.1-9.12 is installed OR binutils-gold-2.26.1-9.12 is installed OR cross-ppc-binutils-2.26.1-9.12 is installed OR cross-spu-binutils-2.26.1-9.12 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND aaa_base-malloccheck-13.2+git20140911.61c1681-38.8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND libssh4-0.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information empathy-3.12.12-7 is installed OR empathy-lang-3.12.12-7 is installed OR telepathy-mission-control-plugin-goa-3.12.12-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information empathy-3.12.13-8.3 is installed OR empathy-lang-3.12.13-8.3 is installed OR telepathy-mission-control-plugin-goa-3.12.13-8.3 is installed
BACK