Oval Definition:	oval:org.opensuse.security:def:6944
Revision Date: 2021-07-29 Version: 1 Title: Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_56 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116) - CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050) Family: unix Class: patch Status: Reference(s): 1187052 1188117 1188257 CVE-2004-2771 CVE-2006-4484 CVE-2008-1420 CVE-2009-0163 CVE-2009-0946 CVE-2009-2820 CVE-2009-3379 CVE-2009-3553 CVE-2010-0393 CVE-2010-0540 CVE-2010-0542 CVE-2010-1748 CVE-2010-2497 CVE-2010-2805 CVE-2010-2941 CVE-2010-3053 CVE-2010-3054 CVE-2010-3311 CVE-2010-3814 CVE-2010-3855 CVE-2010-4651 CVE-2010-4651 CVE-2011-0226 CVE-2011-2485 CVE-2011-2489 CVE-2011-2490 CVE-2011-3256 CVE-2011-3439 CVE-2012-0444 CVE-2012-1126 CVE-2012-1127 CVE-2012-1128 CVE-2012-1129 CVE-2012-1130 CVE-2012-1131 CVE-2012-1132 CVE-2012-1133 CVE-2012-1134 CVE-2012-1135 CVE-2012-1136 CVE-2012-1137 CVE-2012-1138 CVE-2012-1139 CVE-2012-1140 CVE-2012-1141 CVE-2012-1142 CVE-2012-1143 CVE-2012-1144 CVE-2012-1152 CVE-2012-3547 CVE-2012-5519 CVE-2012-5668 CVE-2012-5669 CVE-2012-5670 CVE-2012-6094 CVE-2014-2015 CVE-2014-2240 CVE-2014-2241 CVE-2014-2856 CVE-2014-3537 CVE-2014-3564 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 CVE-2014-7844 CVE-2015-1196 CVE-2015-1395 CVE-2015-1396 CVE-2015-4491 CVE-2015-6806 CVE-2015-7552 CVE-2015-7673 CVE-2015-7674 CVE-2016-10713 CVE-2016-6352 CVE-2016-9445 CVE-2016-9446 CVE-2016-9809 CVE-2016-9812 CVE-2016-9813 CVE-2017-1000422 CVE-2017-2862 CVE-2017-2870 CVE-2017-5715 CVE-2017-5843 CVE-2017-5848 CVE-2017-6312 CVE-2017-6313 CVE-2017-6314 CVE-2018-1000156 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-3639 CVE-2018-3640 CVE-2018-6951 CVE-2019-11091 CVE-2019-11135 CVE-2019-11139 CVE-2020-36385 CVE-2021-22555 CVE-2021-33909 Platform(s): openSUSE 13.1 openSUSE 13.2 openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.69-60.64.32 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.59-92.24 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information ocaml-4.03.0-8.6 is installed OR ocaml-ocamldoc-4.03.0-8.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bash-3.2-147.22.1 is installed OR bash-doc-3.2-147.22.1 is installed OR libreadline5-5.2-147.22.1 is installed OR libreadline5-32bit-5.2-147.22.1 is installed OR readline-doc-5.2-147.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-31.8.0esr-0.10.1 is installed OR MozillaFirefox-translations-31.8.0esr-0.10.1 is installed OR libfreebl3-3.19.2_CKBI_1.98-0.10.1 is installed OR libfreebl3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nspr-4.10.8-0.5.1 is installed OR mozilla-nspr-32bit-4.10.8-0.5.1 is installed OR mozilla-nss-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-tools-3.19.2_CKBI_1.98-0.10.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND dracut-037-91 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information MozillaFirefox-45.5.0esr-88 is installed OR MozillaFirefox-translations-45.5.0esr-88 is installed OR libfreebl3-3.21.3-50 is installed OR libfreebl3-32bit-3.21.3-50 is installed OR libsoftokn3-3.21.3-50 is installed OR libsoftokn3-32bit-3.21.3-50 is installed OR mozilla-nss-3.21.3-50 is installed OR mozilla-nss-32bit-3.21.3-50 is installed OR mozilla-nss-certs-3.21.3-50 is installed OR mozilla-nss-certs-32bit-3.21.3-50 is installed OR mozilla-nss-sysinit-3.21.3-50 is installed OR mozilla-nss-sysinit-32bit-3.21.3-50 is installed OR mozilla-nss-tools-3.21.3-50 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libsystemd0-228-150.9 is installed OR libsystemd0-32bit-228-150.9 is installed OR libudev1-228-150.9 is installed OR libudev1-32bit-228-150.9 is installed OR systemd-228-150.9 is installed OR systemd-32bit-228-150.9 is installed OR systemd-bash-completion-228-150.9 is installed OR systemd-sysvinit-228-150.9 is installed OR udev-228-150.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information gdk-pixbuf-lang-2.34.0-19.17 is installed OR gdk-pixbuf-query-loaders-2.34.0-19.17 is installed OR gdk-pixbuf-query-loaders-32bit-2.34.0-19.17 is installed OR libgdk_pixbuf-2_0-0-2.34.0-19.17 is installed OR libgdk_pixbuf-2_0-0-32bit-2.34.0-19.17 is installed OR typelib-1_0-GdkPixbuf-2_0-2.34.0-19.17 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information openvpn-2.3.8-16.20 is installed OR openvpn-auth-pam-plugin-2.3.8-16.20 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND mailx-12.5-28 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_56-default-12-2.2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.95-21 is installed OR cluster-network-kmp-rt-4.4.95-21 is installed OR dlm-kmp-rt-4.4.95-21 is installed OR gfs2-kmp-rt-4.4.95-21 is installed OR kernel-devel-rt-4.4.95-21 is installed OR kernel-rt-4.4.95-21 is installed OR kernel-rt-base-4.4.95-21 is installed OR kernel-rt-devel-4.4.95-21 is installed OR kernel-rt_debug-4.4.95-21 is installed OR kernel-rt_debug-devel-4.4.95-21 is installed OR kernel-source-rt-4.4.95-21 is installed OR kernel-syms-rt-4.4.95-21 is installed OR ocfs2-kmp-rt-4.4.95-21 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND systemtap-0.7.1-42.5.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information MozillaFirefox-31.3.0esr-0.3.1 is installed OR MozillaFirefox-translations-31.3.0esr-0.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND java-1_6_0-ibm-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.0-0.3.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr15.0-0.5.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND java-1_6_0-ibm-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.0-0.3.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr15.0-0.5.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND java-1_6_0-ibm-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.0-0.3.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr15.0-0.5.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND automake-1.10.1-4.131.9.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND automake-1.10.1-4.131.9.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information MozillaFirefox-45.3.0esr-48.1 is installed OR MozillaFirefox-branding-SLED-45.0-20.38 is installed OR MozillaFirefox-translations-45.3.0esr-48.1 is installed OR firefox-fontconfig-2.11.0-4.2 is installed OR libfreebl3-3.21.1-26.2 is installed OR libfreebl3-32bit-3.21.1-26.2 is installed OR mozilla-nspr-4.12-25.2 is installed OR mozilla-nspr-32bit-4.12-25.2 is installed OR mozilla-nspr-devel-4.12-25.2 is installed OR mozilla-nss-3.21.1-26.2 is installed OR mozilla-nss-32bit-3.21.1-26.2 is installed OR mozilla-nss-devel-3.21.1-26.2 is installed OR mozilla-nss-tools-3.21.1-26.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information curl-7.19.7-1.26.8 is installed OR libcurl4-7.19.7-1.26.8 is installed OR libcurl4-32bit-7.19.7-1.26.8 is installed OR libcurl4-x86-7.19.7-1.26.8 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information taglib-1.5-19.23.4 is installed OR taglib-32bit-1.5-19.23.4 is installed OR taglib-x86-1.5-19.23.4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information cups-1.7.5-2 is installed OR cups-client-1.7.5-2 is installed OR cups-libs-1.7.5-2 is installed OR cups-libs-32bit-1.7.5-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information openvpn-2.3.8-16.17.1 is installed OR openvpn-auth-pam-plugin-2.3.8-16.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information cpp48-4.8.5-30 is installed OR gcc48-4.8.5-30 is installed OR gcc48-32bit-4.8.5-30 is installed OR gcc48-c++-4.8.5-30 is installed OR gcc48-info-4.8.5-30 is installed OR gcc48-locale-4.8.5-30 is installed OR libasan0-4.8.5-30 is installed OR libasan0-32bit-4.8.5-30 is installed OR libstdc++48-devel-4.8.5-30 is installed OR libstdc++48-devel-32bit-4.8.5-30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information bind-9.11.2-1 is installed OR bind-chrootenv-9.11.2-1 is installed OR bind-doc-9.11.2-1 is installed OR bind-utils-9.11.2-1 is installed OR libbind9-160-9.11.2-1 is installed OR libdns169-9.11.2-1 is installed OR libirs160-9.11.2-1 is installed OR libisc166-9.11.2-1 is installed OR libisc166-32bit-9.11.2-1 is installed OR libisccc160-9.11.2-1 is installed OR libisccfg160-9.11.2-1 is installed OR liblwres160-9.11.2-1 is installed OR python-bind-9.11.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND ant-1.9.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_15-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND wpa_supplicant-2.2-15.3 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_51-52_39-default-4-2 is installed OR kgraft-patch-3_12_51-52_39-xen-4-2 is installed OR kgraft-patch-SLE12_Update_11-4-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-97 is installed OR libopenssl0_9_8-0.9.8j-97 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND augeas-devel-0.9.0-3.15.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND apache2-mod_fcgid-2.2-31.27.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information apparmor-2.8.2-54 is installed OR libapparmor-devel-2.8.2-54 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information samba-4.2.4-28.3 is installed OR samba-test-devel-4.2.4-28.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND libX11-devel-1.6.2-11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND accountsservice-devel-0.6.42-16.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND libgadu3-1.11.4-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libjavascriptcoregtk-1_0-0-2.4.11-23 is installed OR libjavascriptcoregtk-1_0-0-32bit-2.4.11-23 is installed OR libwebkitgtk-1_0-0-2.4.11-23 is installed OR libwebkitgtk-1_0-0-32bit-2.4.11-23 is installed OR libwebkitgtk2-lang-2.4.11-23 is installed OR typelib-1_0-JavaScriptCore-3_0-2.4.11-23 is installed OR typelib-1_0-WebKit-3_0-2.4.11-23 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND argyllcms-1.6.3-3 is installed
BACK