Oval Definition:	oval:org.opensuse.security:def:6955
Revision Date: 2021-08-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_64 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482). - CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838). - CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215). Family: unix Class: patch Status: Reference(s): 1186483 1188323 1188842 CVE-2008-1483 CVE-2009-0793 CVE-2010-1674 CVE-2010-1675 CVE-2010-2761 CVE-2010-4000 CVE-2010-4410 CVE-2010-4411 CVE-2010-4777 CVE-2012-1152 CVE-2012-3466 CVE-2012-4453 CVE-2013-2186 CVE-2013-4276 CVE-2013-4509 CVE-2013-6393 CVE-2014-0050 CVE-2014-0107 CVE-2014-0467 CVE-2014-2525 CVE-2014-2653 CVE-2014-3618 CVE-2014-9130 CVE-2015-5352 CVE-2015-5600 CVE-2015-6563 CVE-2015-6564 CVE-2015-8325 CVE-2015-8853 CVE-2016-0772 CVE-2016-0777 CVE-2016-0778 CVE-2016-10009 CVE-2016-10010 CVE-2016-10011 CVE-2016-10012 CVE-2016-10708 CVE-2016-1238 CVE-2016-1602 CVE-2016-1908 CVE-2016-2381 CVE-2016-3115 CVE-2016-5636 CVE-2016-5699 CVE-2016-6185 CVE-2016-6210 CVE-2016-6515 CVE-2016-8858 CVE-2017-1000158 CVE-2017-12837 CVE-2017-12883 CVE-2017-15906 CVE-2017-18207 CVE-2017-6512 CVE-2017-8288 CVE-2018-1000030 CVE-2018-1000802 CVE-2018-12015 CVE-2018-15473 CVE-2018-18311 CVE-2018-19636 CVE-2018-19637 CVE-2018-19638 CVE-2018-19639 CVE-2018-19640 CVE-2018-20685 CVE-2018-6797 CVE-2018-6798 CVE-2018-6913 CVE-2019-6109 CVE-2019-6110 CVE-2019-6111 CVE-2021-22543 CVE-2021-3609 CVE-2021-37576 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.3.2-6 is installed OR libreoffice-sdk-4.3.3.2-6 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.51-60.20 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-84 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libudev-mini-devel-228-150.29 is installed OR libudev-mini1-228-150.29 is installed OR systemd-mini-228-150.29 is installed OR systemd-mini-devel-228-150.29 is installed OR udev-mini-228-150.29 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-10.0.12-0.4.1 is installed OR MozillaFirefox-translations-10.0.12-0.4.1 is installed OR libfreebl3-3.14.1-0.3.1 is installed OR libfreebl3-32bit-3.14.1-0.3.1 is installed OR mozilla-nspr-4.9.4-0.3.1 is installed OR mozilla-nspr-32bit-4.9.4-0.3.1 is installed OR mozilla-nss-3.14.1-0.3.1 is installed OR mozilla-nss-32bit-3.14.1-0.3.1 is installed OR mozilla-nss-tools-3.14.1-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-31.8.0esr-0.13.2 is installed OR MozillaFirefox-translations-31.8.0esr-0.13.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libpng12-1.2.50-19 is installed OR libpng12-0-1.2.50-19 is installed OR libpng12-0-32bit-1.2.50-19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information tar-1.27.1-11 is installed OR tar-lang-1.27.1-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libncurses5-5.9-50 is installed OR libncurses5-32bit-5.9-50 is installed OR libncurses6-5.9-50 is installed OR libncurses6-32bit-5.9-50 is installed OR ncurses-5.9-50 is installed OR ncurses-devel-5.9-50 is installed OR ncurses-utils-5.9-50 is installed OR tack-5.9-50 is installed OR terminfo-5.9-50 is installed OR terminfo-base-5.9-50 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information gnome-shell-3.20.4-77.17 is installed OR gnome-shell-browser-plugin-3.20.4-77.17 is installed OR gnome-shell-calendar-3.20.4-77.17 is installed OR gnome-shell-lang-3.20.4-77.17 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kgraft-patch-3_12_69-60_64_29-default-9-2 is installed OR kgraft-patch-3_12_69-60_64_29-xen-9-2 is installed OR kgraft-patch-SLE12-SP1_Update_12-9-2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information openssh-7.2p2-74.45 is installed OR openssh-fips-7.2p2-74.45 is installed OR openssh-helpers-7.2p2-74.45 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_64-default-11-2.2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.88-18 is installed OR cluster-network-kmp-rt-4.4.88-18 is installed OR dlm-kmp-rt-4.4.88-18 is installed OR gfs2-kmp-rt-4.4.88-18 is installed OR kernel-devel-rt-4.4.88-18 is installed OR kernel-rt-4.4.88-18 is installed OR kernel-rt-base-4.4.88-18 is installed OR kernel-rt-devel-4.4.88-18 is installed OR kernel-rt_debug-4.4.88-18 is installed OR kernel-rt_debug-devel-4.4.88-18 is installed OR kernel-source-rt-4.4.88-18 is installed OR kernel-syms-rt-4.4.88-18 is installed OR ocfs2-kmp-rt-4.4.88-18 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information MozillaFirefox-24.6.0esr-0.3.1 is installed OR MozillaFirefox-branding-SLED-24-0.4.10.24 is installed OR MozillaFirefox-translations-24.6.0esr-0.3.1 is installed OR libfreebl3-3.16.1-0.3.1 is installed OR libfreebl3-32bit-3.16.1-0.3.1 is installed OR mozilla-nspr-4.10.6-0.3.1 is installed OR mozilla-nspr-32bit-4.10.6-0.3.1 is installed OR mozilla-nss-3.16.1-0.3.1 is installed OR mozilla-nss-32bit-3.16.1-0.3.1 is installed OR mozilla-nss-tools-3.16.1-0.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND MozillaFirefox-17.0.6esr-0.4.1 is installed OR MozillaFirefox-translations-17.0.6esr-0.4.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND MozillaFirefox-17.0.6esr-0.4.1 is installed OR MozillaFirefox-translations-17.0.6esr-0.4.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND enscript-1.6.4-152.22.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND vsftpd-2.0.7-4.35.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information dracut-037-34 is installed OR dracut-fips-037-34 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND apache2-mod_nss-1.0.8-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_45-default-2-2.1 is installed OR kgraft-patch-3_12_74-60_64_45-xen-2-2.1 is installed OR kgraft-patch-SLE12-SP1_Update_16-2-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information apache2-2.4.23-14 is installed OR apache2-doc-2.4.23-14 is installed OR apache2-example-pages-2.4.23-14 is installed OR apache2-prefork-2.4.23-14 is installed OR apache2-utils-2.4.23-14 is installed OR apache2-worker-2.4.23-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND davfs2-1.5.2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information coreutils-8.25-13.7 is installed OR coreutils-lang-8.25-13.7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information apache2-2.4.10-14.17.1 is installed OR apache2-doc-2.4.10-14.17.1 is installed OR apache2-example-pages-2.4.10-14.17.1 is installed OR apache2-prefork-2.4.10-14.17.1 is installed OR apache2-utils-2.4.10-14.17.1 is installed OR apache2-worker-2.4.10-14.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information libjavascriptcoregtk-4_0-18-2.18.0-2.9 is installed OR libwebkit2gtk-4_0-37-2.18.0-2.9 is installed OR typelib-1_0-JavaScriptCore-4_0-2.18.0-2.9 is installed OR typelib-1_0-WebKit2-4_0-2.18.0-2.9 is installed OR webkit2gtk-4_0-injected-bundles-2.18.0-2.9 is installed OR webkit2gtk3-2.18.0-2.9 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2 is installed OR kgraft-patch-SLE12_Update_15-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-97 is installed OR libopenssl0_9_8-0.9.8j-97 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information libldb-devel-3.6.3-0.52.5 is installed OR libnetapi-devel-3.6.3-0.52.5 is installed OR libnetapi0-3.6.3-0.52.5 is installed OR libsmbclient-devel-3.6.3-0.52.5 is installed OR libsmbsharemodes-devel-3.6.3-0.52.5 is installed OR libsmbsharemodes0-3.6.3-0.52.5 is installed OR libtalloc-devel-3.6.3-0.52.5 is installed OR libtdb-devel-3.6.3-0.52.5 is installed OR libtevent-devel-3.6.3-0.52.5 is installed OR libwbclient-devel-3.6.3-0.52.5 is installed OR samba-devel-3.6.3-0.52.5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information ImageMagick-6.4.3.6-7.30.1 is installed OR ImageMagick-devel-6.4.3.6-7.30.1 is installed OR libMagick++-devel-6.4.3.6-7.30.1 is installed OR libMagick++1-6.4.3.6-7.30.1 is installed OR libMagickWand1-6.4.3.6-7.30.1 is installed OR libMagickWand1-32bit-6.4.3.6-7.30.1 is installed OR perl-PerlMagick-6.4.3.6-7.30.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information kernel-docs-3.12.74-60.64.40 is installed OR kernel-obs-build-3.12.74-60.64.40 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libpacemaker-devel-1.1.15-21 is installed OR pacemaker-1.1.15-21 is installed OR pacemaker-cts-1.1.15-21 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND libXres-devel-1.0.7-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND bind-devel-9.11.2-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information libsilc-1_1-2-1.1.10-24 is installed OR libsilcclient-1_1-3-1.1.10-24 is installed OR silc-toolkit-1.1.10-24 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND gd-32bit-2.1.0-23 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND gd-32bit-2.1.0-24.9 is installed
BACK