Oval Definition:	oval:org.opensuse.security:def:6958
Revision Date: 2021-08-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_51 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482). - CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838). - CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215). Family: unix Class: patch Status: Reference(s): 1186483 1188323 1188842 CVE-2009-3939 CVE-2009-4026 CVE-2009-4027 CVE-2009-4131 CVE-2009-4138 CVE-2009-4536 CVE-2009-4538 CVE-2010-1146 CVE-2010-1436 CVE-2010-1641 CVE-2010-2066 CVE-2010-2529 CVE-2010-2547 CVE-2010-2547 CVE-2010-2942 CVE-2010-2954 CVE-2010-2955 CVE-2010-3081 CVE-2010-3296 CVE-2010-3297 CVE-2010-3298 CVE-2010-3301 CVE-2010-3310 CVE-2010-3609 CVE-2011-0712 CVE-2011-1020 CVE-2011-1577 CVE-2011-2203 CVE-2011-3200 CVE-2012-0035 CVE-2012-0056 CVE-2012-2372 CVE-2013-0160 CVE-2013-0231 CVE-2013-0913 CVE-2013-2850 CVE-2013-4351 CVE-2013-4351 CVE-2013-4402 CVE-2013-4402 CVE-2013-4587 CVE-2013-4758 CVE-2013-6367 CVE-2013-6368 CVE-2013-6370 CVE-2013-6371 CVE-2013-6376 CVE-2014-00691 CVE-2014-0102 CVE-2014-0131 CVE-2014-0196 CVE-2014-1932 CVE-2014-2523 CVE-2014-3158 CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 CVE-2014-3534 CVE-2014-3634 CVE-2014-3917 CVE-2014-3940 CVE-2014-4171 CVE-2014-4607 CVE-2014-4617 CVE-2014-4617 CVE-2014-4652 CVE-2014-4653 CVE-2014-4654 CVE-2014-4655 CVE-2014-4656 CVE-2014-4699 CVE-2014-4910 CVE-2014-4943 CVE-2014-5045 CVE-2014-5077 CVE-2014-5206 CVE-2014-5207 CVE-2014-5471 CVE-2014-5472 CVE-2015-1606 CVE-2015-1607 CVE-2015-3310 CVE-2016-1246 CVE-2016-1249 CVE-2016-1251 CVE-2017-10788 CVE-2017-10789 CVE-2017-5731 CVE-2017-5732 CVE-2017-5733 CVE-2017-5734 CVE-2017-5735 CVE-2018-0739 CVE-2018-12020 CVE-2018-12178 CVE-2018-12180 CVE-2018-12181 CVE-2018-19416 CVE-2018-19517 CVE-2018-3613 CVE-2018-3630 CVE-2019-0160 CVE-2019-0161 CVE-2019-6446 CVE-2021-22543 CVE-2021-3609 CVE-2021-37576 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.39-47 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-22 is installed OR krb5-mini-devel-1.12.1-22 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libudev-mini-devel-228-149 is installed OR libudev-mini1-228-149 is installed OR systemd-mini-228-149 is installed OR systemd-mini-devel-228-149 is installed OR udev-mini-228-149 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.162-94.69 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-17.0.6esr-0.4.1 is installed OR MozillaFirefox-translations-17.0.6esr-0.4.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.8.0esr-0.10.1 is installed OR MozillaFirefox-translations-31.8.0esr-0.10.1 is installed OR libfreebl3-3.19.2_CKBI_1.98-0.10.1 is installed OR libfreebl3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nspr-4.10.8-0.5.1 is installed OR mozilla-nspr-32bit-4.10.8-0.5.1 is installed OR mozilla-nss-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-tools-3.19.2_CKBI_1.98-0.10.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-31.8.0esr-0.10.1 is installed OR MozillaFirefox-translations-31.8.0esr-0.10.1 is installed OR libfreebl3-3.19.2_CKBI_1.98-0.10.1 is installed OR libfreebl3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nspr-4.10.8-0.5.1 is installed OR mozilla-nspr-32bit-4.10.8-0.5.1 is installed OR mozilla-nss-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-tools-3.19.2_CKBI_1.98-0.10.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information bind-9.9.9P1-53 is installed OR bind-libs-9.9.9P1-53 is installed OR bind-libs-32bit-9.9.9P1-53 is installed OR bind-utils-9.9.9P1-53 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information jasper-1.900.14-181 is installed OR libjasper1-1.900.14-181 is installed OR libjasper1-32bit-1.900.14-181 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libsoup-2.54.1-5.3 is installed OR libsoup-2_4-1-2.54.1-5.3 is installed OR libsoup-2_4-1-32bit-2.54.1-5.3 is installed OR libsoup-lang-2.54.1-5.3 is installed OR typelib-1_0-Soup-2_4-2.54.1-5.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information gpg2-2.0.24-9.3 is installed OR gpg2-lang-2.0.24-9.3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_60-default-3-2 is installed OR kgraft-patch-3_12_74-60_64_60-xen-3-2 is installed OR kgraft-patch-SLE12-SP1_Update_21-3-2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information ovmf-2017+git1510945757.b2662641d5-3.16 is installed OR ovmf-tools-2017+git1510945757.b2662641d5-3.16 is installed OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-3.16 is installed OR qemu-uefi-aarch64-2017+git1510945757.b2662641d5-3.16 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_51-default-14-2.2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.114-27 is installed OR cluster-network-kmp-rt-4.4.114-27 is installed OR dlm-kmp-rt-4.4.114-27 is installed OR gfs2-kmp-rt-4.4.114-27 is installed OR kernel-devel-rt-4.4.114-27 is installed OR kernel-rt-4.4.114-27 is installed OR kernel-rt-base-4.4.114-27 is installed OR kernel-rt-devel-4.4.114-27 is installed OR kernel-rt_debug-4.4.114-27 is installed OR kernel-rt_debug-devel-4.4.114-27 is installed OR kernel-source-rt-4.4.114-27 is installed OR kernel-syms-rt-4.4.114-27 is installed OR ocfs2-kmp-rt-4.4.114-27 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information MozillaFirefox-24.5.0esr-0.3.1 is installed OR MozillaFirefox-branding-SLED-24-0.4.10.14 is installed OR MozillaFirefox-translations-24.5.0esr-0.3.1 is installed OR libfreebl3-3.16-0.3.1 is installed OR libfreebl3-32bit-3.16-0.3.1 is installed OR mozilla-nspr-4.10.4-0.3.1 is installed OR mozilla-nspr-32bit-4.10.4-0.3.1 is installed OR mozilla-nss-3.16-0.3.1 is installed OR mozilla-nss-32bit-3.16-0.3.1 is installed OR mozilla-nss-tools-3.16-0.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND openssl-certs-1.95-0.4.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND openssl-certs-1.95-0.4.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND openssl-certs-1.95-0.4.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND cifs-utils-5.1-0.7.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND cifs-utils-5.1-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information MozillaFirefox-24.6.0esr-0.3.1 is installed OR MozillaFirefox-branding-SLED-24-0.4.10.24 is installed OR MozillaFirefox-translations-24.6.0esr-0.3.1 is installed OR libfreebl3-3.16.1-0.3.1 is installed OR libfreebl3-32bit-3.16.1-0.3.1 is installed OR mozilla-nspr-4.10.6-0.3.1 is installed OR mozilla-nspr-32bit-4.10.6-0.3.1 is installed OR mozilla-nspr-devel-4.10.6-0.3.1 is installed OR mozilla-nss-3.16.1-0.3.1 is installed OR mozilla-nss-32bit-3.16.1-0.3.1 is installed OR mozilla-nss-devel-3.16.1-0.3.1 is installed OR mozilla-nss-tools-3.16.1-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information expat-2.0.1-88.34.1 is installed OR libexpat1-2.0.1-88.34.1 is installed OR libexpat1-32bit-2.0.1-88.34.1 is installed OR libexpat1-x86-2.0.1-88.34.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND wget-1.11.4-1.19.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information emacs-24.3-14 is installed OR emacs-el-24.3-14 is installed OR emacs-info-24.3-14 is installed OR emacs-nox-24.3-14 is installed OR emacs-x11-24.3-14 is installed OR etags-24.3-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND autofs-5.0.9-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_69-60_64_29-default-5-3.1 is installed OR kgraft-patch-3_12_69-60_64_29-xen-5-3.1 is installed OR kgraft-patch-SLE12-SP1_Update_12-5-3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information dhcp-4.3.3-9 is installed OR dhcp-client-4.3.3-9 is installed OR dhcp-relay-4.3.3-9 is installed OR dhcp-server-4.3.3-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information cracklib-2.9.0-7 is installed OR libcrack2-2.9.0-7 is installed OR libcrack2-32bit-2.9.0-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_15-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information krb5-1.12.5-40.16 is installed OR krb5-client-1.12.5-40.16 is installed OR krb5-doc-1.12.5-40.16 is installed OR krb5-plugin-kdb-ldap-1.12.5-40.16 is installed OR krb5-plugin-preauth-otp-1.12.5-40.16 is installed OR krb5-plugin-preauth-pkinit-1.12.5-40.16 is installed OR krb5-server-1.12.5-40.16 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_55-52_42-default-2-2 is installed OR kgraft-patch-3_12_55-52_42-xen-2-2 is installed OR kgraft-patch-SLE12_Update_12-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information MozillaFirefox-52.2.0esr-108 is installed OR MozillaFirefox-branding-SLE-52-31 is installed OR MozillaFirefox-devel-52.2.0esr-108 is installed OR MozillaFirefox-translations-52.2.0esr-108 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND libcurl-devel-7.19.7-1.38.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND MozillaFirefox-devel-31.7.0esr-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information libplist-1.8-10.9 is installed OR libplist++-devel-1.8-10.9 is installed OR libplist++1-1.8-10.9 is installed OR libplist-devel-1.8-10.9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libarchive-3.1.2-25 is installed OR libarchive-devel-3.1.2-25 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND libXv-devel-1.0.10-7 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information bsh2-2.0.0.b5-3 is installed OR bsh2-classgen-2.0.0.b5-3 is installed OR bsh2-javadoc-2.0.0.b5-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND libuuid-devel-2.28-40 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information gnome-online-accounts-3.20.5-9 is installed OR gnome-online-accounts-lang-3.20.5-9 is installed OR libgoa-1_0-0-32bit-3.20.5-9 is installed OR typelib-1_0-Goa-1_0-3.20.5-9 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information gnome-online-accounts-3.20.5-9 is installed OR gnome-online-accounts-lang-3.20.5-9 is installed OR libgoa-1_0-0-32bit-3.20.5-9 is installed OR typelib-1_0-Goa-1_0-3.20.5-9 is installed
BACK