Oval Definition:	oval:org.opensuse.security:def:6968
Revision Date: 2021-09-16 Version: 1 Title: Security update for the Linux Kernel (Live Patch 24 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_89 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1189278 1189418 1189420 CVE-2009-0793 CVE-2009-4492 CVE-2010-0541 CVE-2010-1163 CVE-2010-1205 CVE-2010-1646 CVE-2010-2761 CVE-2010-2761 CVE-2010-4410 CVE-2010-4410 CVE-2010-4411 CVE-2010-4411 CVE-2010-4777 CVE-2010-4777 CVE-2011-0010 CVE-2011-1004 CVE-2011-1005 CVE-2011-2483 CVE-2011-2485 CVE-2011-2501 CVE-2011-3026 CVE-2011-3045 CVE-2011-3048 CVE-2011-3177 CVE-2011-4815 CVE-2012-2337 CVE-2012-3386 CVE-2013-1775 CVE-2013-1776 CVE-2013-1983 CVE-2013-4276 CVE-2013-4314 CVE-2013-4509 CVE-2013-6435 CVE-2013-7353 CVE-2013-7354 CVE-2014-3618 CVE-2014-8118 CVE-2015-8853 CVE-2016-10198 CVE-2016-10199 CVE-2016-1238 CVE-2016-2381 CVE-2016-6185 CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810 CVE-2017-12837 CVE-2017-12883 CVE-2017-16844 CVE-2017-5840 CVE-2017-5841 CVE-2017-5845 CVE-2017-6512 CVE-2017-7500 CVE-2017-7501 CVE-2018-1000807 CVE-2018-1000808 CVE-2018-12015 CVE-2018-18311 CVE-2018-6797 CVE-2018-6798 CVE-2018-6913 CVE-2019-13104 CVE-2019-13106 CVE-2021-3653 CVE-2021-3656 CVE-2021-38198 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.5.2-10 is installed OR libreoffice-sdk-4.3.5.2-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-36 is installed OR krb5-mini-devel-1.12.1-36 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information krb5-mini-1.12.5-40.13 is installed OR krb5-mini-devel-1.12.5-40.13 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libudev-mini-devel-228-150.9 is installed OR libudev-mini1-228-150.9 is installed OR systemd-mini-228-150.9 is installed OR systemd-mini-devel-228-150.9 is installed OR udev-mini-228-150.9 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libudev-mini-devel-228-150.66 is installed OR libudev-mini1-228-150.66 is installed OR systemd-mini-228-150.66 is installed OR systemd-mini-devel-228-150.66 is installed OR udev-mini-228-150.66 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information hplip-3.11.10-0.6.11.1 is installed OR hplip-hpijs-3.11.10-0.6.11.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bind-9.9.6P1-0.22.1 is installed OR bind-libs-9.9.6P1-0.22.1 is installed OR bind-libs-32bit-9.9.6P1-0.22.1 is installed OR bind-utils-9.9.6P1-0.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libsndfile-1.0.25-28 is installed OR libsndfile1-1.0.25-28 is installed OR libsndfile1-32bit-1.0.25-28 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libpython3_4m1_0-3.4.5-19 is installed OR python3-3.4.5-19 is installed OR python3-base-3.4.5-19 is installed OR python3-curses-3.4.5-19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libdcerpc-binding0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libdcerpc-binding0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libdcerpc0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libdcerpc0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-krb5pac0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-krb5pac0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-nbt0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-nbt0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-standard0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr-standard0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libndr0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libnetapi0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libnetapi0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-credentials0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-credentials0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-errors0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-errors0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-hostconfig0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-hostconfig0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-passdb0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-passdb0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-util0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamba-util0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamdb0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsamdb0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbclient0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbclient0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbconf0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbconf0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbldap0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libsmbldap0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libtevent-util0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libtevent-util0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libwbclient0-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR libwbclient0-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-client-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-client-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-doc-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-libs-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-libs-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-winbind-4.6.7+git.38.90b2cdb4f22-3.7 is installed OR samba-winbind-32bit-4.6.7+git.38.90b2cdb4f22-3.7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information gstreamer-plugins-good-1.8.3-15 is installed OR gstreamer-plugins-good-lang-1.8.3-15 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information MozillaFirefox-52.5.0esr-109.9 is installed OR MozillaFirefox-devel-52.5.0esr-109.9 is installed OR MozillaFirefox-translations-52.5.0esr-109.9 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information perl-5.18.2-12.20 is installed OR perl-32bit-5.18.2-12.20 is installed OR perl-base-5.18.2-12.20 is installed OR perl-doc-5.18.2-12.20 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_89-default-6-2.2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.104-24 is installed OR cluster-network-kmp-rt-4.4.104-24 is installed OR dlm-kmp-rt-4.4.104-24 is installed OR gfs2-kmp-rt-4.4.104-24 is installed OR kernel-devel-rt-4.4.104-24 is installed OR kernel-rt-4.4.104-24 is installed OR kernel-rt-base-4.4.104-24 is installed OR kernel-rt-devel-4.4.104-24 is installed OR kernel-rt_debug-4.4.104-24 is installed OR kernel-rt_debug-devel-4.4.104-24 is installed OR kernel-source-rt-4.4.104-24 is installed OR kernel-syms-rt-4.4.104-24 is installed OR ocfs2-kmp-rt-4.4.104-24 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information curl-7.19.7-1.20.27.9 is installed OR libcurl4-7.19.7-1.20.27.9 is installed OR libcurl4-32bit-7.19.7-1.20.27.9 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND clamav-0.97.8-0.2.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND clamav-0.97.8-0.2.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND clamav-0.97.8-0.2.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND cifs-utils-5.1-0.7.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND cifs-utils-5.1-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information MozillaFirefox-45.4.0esr-52.1 is installed OR MozillaFirefox-translations-45.4.0esr-52.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND gd-2.0.36.RC1-52.18 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information xorg-x11-libX11-7.4-5.11.11.7 is installed OR xorg-x11-libX11-32bit-7.4-5.11.11.7 is installed OR xorg-x11-libX11-x86-7.4-5.11.11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information gdk-pixbuf-lang-2.30.6-1 is installed OR gdk-pixbuf-query-loaders-2.30.6-1 is installed OR gdk-pixbuf-query-loaders-32bit-2.30.6-1 is installed OR libgdk_pixbuf-2_0-0-2.30.6-1 is installed OR libgdk_pixbuf-2_0-0-32bit-2.30.6-1 is installed OR typelib-1_0-GdkPixbuf-2_0-2.30.6-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information colord-gtk-lang-0.1.25-3 is installed OR libcolord-gtk1-0.1.25-3 is installed OR libcolord2-1.1.7-5 is installed OR libcolord2-32bit-1.1.7-5 is installed OR libcolorhug2-1.1.7-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_62-60_62-default-10-2.1 is installed OR kgraft-patch-3_12_62-60_62-xen-10-2.1 is installed OR kgraft-patch-SLE12-SP1_Update_7-10-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information eog-3.20.4-7 is installed OR eog-lang-3.20.4-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND davfs2-1.5.2-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information apache-commons-beanutils-1.9.2-3.3 is installed OR apache-commons-beanutils-javadoc-1.9.2-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information libmysqlclient-devel-10.0.26-20.10.2 is installed OR libmysqlclient18-10.0.26-20.10.2 is installed OR libmysqlclient18-32bit-10.0.26-20.10.2 is installed OR libmysqlclient_r18-10.0.26-20.10.2 is installed OR libmysqld-devel-10.0.26-20.10.2 is installed OR libmysqld18-10.0.26-20.10.2 is installed OR mariadb-10.0.26-20.10.2 is installed OR mariadb-client-10.0.26-20.10.2 is installed OR mariadb-errormessages-10.0.26-20.10.2 is installed OR mariadb-tools-10.0.26-20.10.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information xorg-x11-server-7.6_1.18.3-76.15 is installed OR xorg-x11-server-extra-7.6_1.18.3-76.15 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2 is installed OR kgraft-patch-SLE12_Update_14-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-97 is installed OR libopenssl0_9_8-0.9.8j-97 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information apache2-2.2.12-1.40.1 is installed OR apache2-devel-2.2.12-1.40.1 is installed OR apache2-doc-2.2.12-1.40.1 is installed OR apache2-example-pages-2.2.12-1.40.1 is installed OR apache2-prefork-2.2.12-1.40.1 is installed OR apache2-utils-2.2.12-1.40.1 is installed OR apache2-worker-2.2.12-1.40.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information file-devel-4.24-43.27.1 is installed OR python-magic-4.24-43.27.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information GraphicsMagick-1.2.5-4.33.1 is installed OR libGraphicsMagick2-1.2.5-4.33.1 is installed OR perl-GraphicsMagick-1.2.5-4.33.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information libtasn1-3.7-11 is installed OR libtasn1-devel-3.7-11 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information jasper-1.900.14-181 is installed OR libjasper-devel-1.900.14-181 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libblkid-devel-2.29.2-2 is installed OR libmount-devel-2.29.2-2 is installed OR libsmartcols-devel-2.29.2-2 is installed OR libuuid-devel-2.29.2-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information dbus-1-devel-1.8.22-29.10 is installed OR dbus-1-devel-doc-1.8.22-29.10 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND raptor-2.0.10-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information empathy-3.12.12-7 is installed OR empathy-lang-3.12.12-7 is installed OR telepathy-mission-control-plugin-goa-3.12.12-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND bluez-cups-5.13-5.4 is installed
BACK