Oval Definition:oval:org.opensuse.security:def:6962
Revision Date:2021-09-16Version:1
Title:Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important)
Description:

This update for the Linux Kernel 4.12.14-197_67 fixes several issues.

The following security issues were fixed:

- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).
Family:unixClass:patch
Status:Reference(s):1189278
1189418
1189420
CVE-2006-4197
CVE-2006-4484
CVE-2008-0928
CVE-2008-1945
CVE-2008-2382
CVE-2008-3825
CVE-2008-4539
CVE-2009-1384
CVE-2009-1720
CVE-2009-1721
CVE-2010-3430
CVE-2010-3431
CVE-2010-3853
CVE-2011-0460
CVE-2011-0465
CVE-2011-3148
CVE-2011-3149
CVE-2012-1571
CVE-2012-3386
CVE-2012-3515
CVE-2013-3571
CVE-2013-4148
CVE-2013-4149
CVE-2013-4150
CVE-2013-4151
CVE-2013-4526
CVE-2013-4527
CVE-2013-4529
CVE-2013-4530
CVE-2013-4531
CVE-2013-4533
CVE-2013-4534
CVE-2013-4535
CVE-2013-4536
CVE-2013-4537
CVE-2013-4538
CVE-2013-4539
CVE-2013-4540
CVE-2013-4541
CVE-2013-4542
CVE-2013-4544
CVE-2013-6399
CVE-2014-0019
CVE-2014-0142
CVE-2014-0143
CVE-2014-0144
CVE-2014-0145
CVE-2014-0146
CVE-2014-0147
CVE-2014-0150
CVE-2014-0182
CVE-2014-0222
CVE-2014-0223
CVE-2014-2583
CVE-2014-3461
CVE-2014-3640
CVE-2016-9015
CVE-2017-16837
CVE-2017-5838
CVE-2018-1000807
CVE-2018-1000808
CVE-2018-20060
CVE-2019-11236
CVE-2019-11324
CVE-2019-9740
CVE-2021-3653
CVE-2021-3656
CVE-2021-38198
Platform(s):openSUSE 13.1
openSUSE 13.1 NonFree
openSUSE 13.2
openSUSE 13.2 NonFree
openSUSE Leap 42.1
SUSE Linux Enterprise Build System Kit 12
SUSE Linux Enterprise Build System Kit 12 SP1
SUSE Linux Enterprise Build System Kit 12 SP2
SUSE Linux Enterprise Build System Kit 12 SP3
SUSE Linux Enterprise Build System Kit 12 SP4
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise for SAP 12 SP1
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Live Patching 15 SP1
SUSE Linux Enterprise Real Time Extension 12 SP1
SUSE Linux Enterprise Real Time Extension 12 SP3
SUSE Linux Enterprise Server 11 SP1-LTSS
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP2-LTSS
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP3-LTSS
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 12 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Server for VMWare 11 SP2
SUSE Linux Enterprise Software Development Kit 11 SP3
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP2
SUSE Linux Enterprise Workstation Extension 12 SP3
SUSE Linux Enterprise Workstation Extension 12 SP4
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 is installed
  • AND Package Information
  • krb5-mini-1.12.1-16 is installed
  • OR krb5-mini-devel-1.12.1-16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP1 is installed
  • AND kernel-zfcpdump-3.12.59-60.41 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP2 is installed
  • AND Package Information
  • libpoppler-cpp0-0.43.0-16.5 is installed
  • OR poppler-0.43.0-16.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP3 is installed
  • AND Package Information
  • ghostscript-mini-9.26-23.16 is installed
  • OR ghostscript-mini-devel-9.26-23.16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Build System Kit 12 SP4 is installed
  • AND kernel-zfcpdump-4.12.14-95.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • freetype2-2.3.7-25.32.1 is installed
  • OR freetype2-32bit-2.3.7-25.32.1 is installed
  • OR freetype2-devel-2.3.7-25.32.1 is installed
  • OR ft2demos-2.3.7-25.32.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • augeas-0.9.0-3.17.2 is installed
  • OR libaugeas0-0.9.0-3.17.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP4 is installed
  • AND Package Information
  • MozillaFirefox-31.8.0esr-0.13.2 is installed
  • OR MozillaFirefox-translations-31.8.0esr-0.13.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • gstreamer-1.2.4-2.3 is installed
  • OR gstreamer-lang-1.2.4-2.3 is installed
  • OR gstreamer-utils-1.2.4-2.3 is installed
  • OR libgstreamer-1_0-0-1.2.4-2.3 is installed
  • OR libgstreamer-1_0-0-32bit-1.2.4-2.3 is installed
  • OR typelib-1_0-Gst-1_0-1.2.4-2.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • ghostscript-9.15-17 is installed
  • OR ghostscript-x11-9.15-17 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • curl-7.37.0-37.3 is installed
  • OR libcurl4-7.37.0-37.3 is installed
  • OR libcurl4-32bit-7.37.0-37.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • gstreamer-1.8.3-9 is installed
  • OR gstreamer-lang-1.8.3-9 is installed
  • OR gstreamer-utils-1.8.3-9 is installed
  • OR libgstreamer-1_0-0-1.8.3-9 is installed
  • OR libgstreamer-1_0-0-32bit-1.8.3-9 is installed
  • OR typelib-1_0-Gst-1_0-1.8.3-9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise for SAP 12 SP1 is installed
  • AND Package Information
  • kgraft-patch-3_12_74-60_64_48-default-5-2 is installed
  • OR kgraft-patch-3_12_74-60_64_48-xen-5-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_17-5-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND Package Information
  • pam_krb5-2.4.4-4 is installed
  • OR pam_krb5-32bit-2.4.4-4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed
  • AND kernel-livepatch-4_12_14-197_67-default-12-2.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Real Time Extension 12 SP1 is installed
  • AND Package Information
  • kernel-compute-3.12.61-60.18 is installed
  • OR kernel-compute-base-3.12.61-60.18 is installed
  • OR kernel-compute-devel-3.12.61-60.18 is installed
  • OR kernel-compute_debug-3.12.61-60.18 is installed
  • OR kernel-compute_debug-devel-3.12.61-60.18 is installed
  • OR kernel-devel-rt-3.12.61-60.18 is installed
  • OR kernel-rt-3.12.61-60.18 is installed
  • OR kernel-rt-base-3.12.61-60.18 is installed
  • OR kernel-rt-devel-3.12.61-60.18 is installed
  • OR kernel-rt_debug-3.12.61-60.18 is installed
  • OR kernel-rt_debug-devel-3.12.61-60.18 is installed
  • OR kernel-source-rt-3.12.61-60.18 is installed
  • OR kernel-syms-rt-3.12.61-60.18 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Real Time Extension 12 SP3 is installed
  • AND Package Information
  • cluster-md-kmp-rt-4.4.147-3.20 is installed
  • OR dlm-kmp-rt-4.4.147-3.20 is installed
  • OR gfs2-kmp-rt-4.4.147-3.20 is installed
  • OR kernel-devel-rt-4.4.147-3.20 is installed
  • OR kernel-rt-4.4.147-3.20 is installed
  • OR kernel-rt-base-4.4.147-3.20 is installed
  • OR kernel-rt-devel-4.4.147-3.20 is installed
  • OR kernel-rt_debug-4.4.147-3.20 is installed
  • OR kernel-rt_debug-devel-4.4.147-3.20 is installed
  • OR kernel-source-rt-4.4.147-3.20 is installed
  • OR kernel-syms-rt-4.4.147-3.20 is installed
  • OR ocfs2-kmp-rt-4.4.147-3.20 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP1-LTSS is installed
  • AND Package Information
  • bind-9.6ESVR7P4-0.2.3.1 is installed
  • OR bind-chrootenv-9.6ESVR7P4-0.2.3.1 is installed
  • OR bind-doc-9.6ESVR7P4-0.2.3.1 is installed
  • OR bind-libs-9.6ESVR7P4-0.2.3.1 is installed
  • OR bind-libs-32bit-9.6ESVR7P4-0.2.3.1 is installed
  • OR bind-utils-9.6ESVR7P4-0.2.3.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • apache2-2.2.12-1.40.1 is installed
  • OR apache2-doc-2.2.12-1.40.1 is installed
  • OR apache2-example-pages-2.2.12-1.40.1 is installed
  • OR apache2-prefork-2.2.12-1.40.1 is installed
  • OR apache2-utils-2.2.12-1.40.1 is installed
  • OR apache2-worker-2.2.12-1.40.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP2-LTSS is installed
  • AND
  • apache2-2.2.12-1.40.1 is installed
  • OR apache2-doc-2.2.12-1.40.1 is installed
  • OR apache2-example-pages-2.2.12-1.40.1 is installed
  • OR apache2-prefork-2.2.12-1.40.1 is installed
  • OR apache2-utils-2.2.12-1.40.1 is installed
  • OR apache2-worker-2.2.12-1.40.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • apache2-2.2.12-1.40.1 is installed
  • OR apache2-doc-2.2.12-1.40.1 is installed
  • OR apache2-example-pages-2.2.12-1.40.1 is installed
  • OR apache2-prefork-2.2.12-1.40.1 is installed
  • OR apache2-utils-2.2.12-1.40.1 is installed
  • OR apache2-worker-2.2.12-1.40.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • curl-7.19.7-1.20.31.1 is installed
  • OR libcurl4-7.19.7-1.20.31.1 is installed
  • OR libcurl4-32bit-7.19.7-1.20.31.1 is installed
  • OR libcurl4-x86-7.19.7-1.20.31.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server for VMWare 11 SP2 is installed
  • AND
  • curl-7.19.7-1.20.31.1 is installed
  • OR libcurl4-7.19.7-1.20.31.1 is installed
  • OR libcurl4-32bit-7.19.7-1.20.31.1 is installed
  • OR libcurl4-x86-7.19.7-1.20.31.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2-LTSS is installed
  • AND Package Information
  • ImageMagick-6.4.3.6-7.40.1 is installed
  • OR libMagickCore1-6.4.3.6-7.40.1 is installed
  • OR libMagickCore1-32bit-6.4.3.6-7.40.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND foomatic-filters-3.0.2-269.35.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND xalan-j2-2.7.0-217.26.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND Package Information
  • file-5.19-2 is installed
  • OR file-magic-5.19-2 is installed
  • OR libmagic1-5.19-2 is installed
  • OR libmagic1-32bit-5.19-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • bind-9.9.6P1-30 is installed
  • OR bind-chrootenv-9.9.6P1-30 is installed
  • OR bind-doc-9.9.6P1-30 is installed
  • OR bind-libs-9.9.6P1-30 is installed
  • OR bind-libs-32bit-9.9.6P1-30 is installed
  • OR bind-utils-9.9.6P1-30 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_67-60_64_24-default-6-3.1 is installed
  • OR kgraft-patch-3_12_67-60_64_24-xen-6-3.1 is installed
  • OR kgraft-patch-SLE12-SP1_Update_11-6-3.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • apache-commons-beanutils-1.9.2-1 is installed
  • OR apache-commons-beanutils-javadoc-1.9.2-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • dracut-044-113 is installed
  • OR dracut-fips-044-113 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • cups-1.7.5-20.17 is installed
  • OR cups-client-1.7.5-20.17 is installed
  • OR cups-libs-1.7.5-20.17 is installed
  • OR cups-libs-32bit-1.7.5-20.17 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • AND Package Information
  • PackageKit-1.1.3-24.9 is installed
  • OR PackageKit-backend-zypp-1.1.3-24.9 is installed
  • OR PackageKit-lang-1.1.3-24.9 is installed
  • OR libpackagekit-glib2-18-1.1.3-24.9 is installed
  • OR typelib-1_0-PackageKitGlib-1_0-1.1.3-24.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_51-52_39-default-4-2.2 is installed
  • OR kgraft-patch-3_12_51-52_39-xen-4-2.2 is installed
  • OR kgraft-patch-SLE12_Update_11-4-2.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • libdcerpc-atsvc0-4.2.4-28.21 is installed
  • OR samba-4.2.4-28.21 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_44-52_18-default-6-2 is installed
  • OR kgraft-patch-3_12_44-52_18-xen-6-2 is installed
  • OR kgraft-patch-SLE12_Update_7-6-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed
  • AND Package Information
  • compat-openssl098-0.9.8j-97 is installed
  • OR libopenssl0_9_8-0.9.8j-97 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP3 is installed
  • AND Package Information
  • dhcp-4.2.4.P2-0.24.1 is installed
  • OR dhcp-devel-4.2.4.P2-0.24.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND PolicyKit-devel-0.9-14.43.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND Package Information
  • pam-1.1.8-23 is installed
  • OR pam-devel-1.1.8-23 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-47 is installed
  • OR ImageMagick-devel-6.8.8.1-47 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-47 is installed
  • OR libMagick++-devel-6.8.8.1-47 is installed
  • OR perl-PerlMagick-6.8.8.1-47 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND libapparmor-devel-2.8.2-49 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND cifs-utils-devel-6.5-9.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 is installed
  • AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
  • AND Package Information
  • ImageMagick-6.8.8.1-8 is installed
  • OR libMagick++-6_Q16-3-6.8.8.1-8 is installed
  • OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP2 is installed
  • AND libwebkit2gtk3-lang-2.12.5-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP3 is installed
  • AND bash-lang-4.3-82 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP4 is installed
  • AND Package Information
  • gstreamer-0_10-plugins-good-0.10.31-16 is installed
  • OR gstreamer-0_10-plugins-good-lang-0.10.31-16 is installed
    • BACK