Oval Definition:	oval:org.opensuse.security:def:6969
Revision Date: 2021-09-16 Version: 1 Title: Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_92 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1189278 1189418 1189420 CVE-2010-1205 CVE-2010-2529 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 CVE-2011-2895 CVE-2011-3146 CVE-2011-3328 CVE-2011-4182 CVE-2012-2451 CVE-2013-1881 CVE-2013-2131 CVE-2013-4238 CVE-2013-6418 CVE-2013-6462 CVE-2013-6954 CVE-2013-7447 CVE-2014-0209 CVE-2014-0210 CVE-2014-0211 CVE-2014-0333 CVE-2014-3675 CVE-2014-3676 CVE-2014-3677 CVE-2016-0772 CVE-2016-1000110 CVE-2016-10165 CVE-2016-1601 CVE-2016-5636 CVE-2016-5699 CVE-2017-1000158 CVE-2017-18207 CVE-2017-5715 CVE-2018-1000030 CVE-2018-1000802 CVE-2018-10860 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-16435 CVE-2018-3639 CVE-2018-3640 CVE-2019-11091 CVE-2019-11135 CVE-2019-11139 CVE-2021-3653 CVE-2021-3656 CVE-2021-38198 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.3.2-6 is installed OR libreoffice-sdk-4.3.3.2-6 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information ocaml-4.02.3-6.6 is installed OR ocaml-ocamldoc-4.02.3-6.6 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.90-92.45 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.82-6.3 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information PackageKit-1.1.3-24.9 is installed OR PackageKit-branding-upstream-1.1.3-24.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND icedtea-web-1.4.1-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND binutils-2.23.1-0.23.15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-38.6.1esr-34.1 is installed OR MozillaFirefox-translations-38.6.1esr-34.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information curl-7.37.0-36 is installed OR libcurl4-7.37.0-36 is installed OR libcurl4-32bit-7.37.0-36 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information bind-9.9.9P1-49 is installed OR bind-libs-9.9.9P1-49 is installed OR bind-libs-32bit-9.9.9P1-49 is installed OR bind-utils-9.9.9P1-49 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libzypp-16.15.3-2.3 is installed OR yast2-pkg-bindings-3.2.4-2.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information gtk2-data-2.24.31-7 is installed OR gtk2-lang-2.24.31-7 is installed OR gtk2-tools-2.24.31-7 is installed OR gtk2-tools-32bit-2.24.31-7 is installed OR libgtk-2_0-0-2.24.31-7 is installed OR libgtk-2_0-0-32bit-2.24.31-7 is installed OR typelib-1_0-Gtk-2_0-2.24.31-7 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information xen-4.5.5_20-22.36 is installed OR xen-doc-html-4.5.5_20-22.36 is installed OR xen-kmp-default-4.5.5_20_k3.12.74_60.64.63-22.36 is installed OR xen-libs-4.5.5_20-22.36 is installed OR xen-libs-32bit-4.5.5_20-22.36 is installed OR xen-tools-4.5.5_20-22.36 is installed OR xen-tools-domU-4.5.5_20-22.36 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND perl-Archive-Zip-1.34-3.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_92-default-5-2.2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.114-27 is installed OR cluster-network-kmp-rt-4.4.114-27 is installed OR dlm-kmp-rt-4.4.114-27 is installed OR gfs2-kmp-rt-4.4.114-27 is installed OR kernel-devel-rt-4.4.114-27 is installed OR kernel-rt-4.4.114-27 is installed OR kernel-rt-base-4.4.114-27 is installed OR kernel-rt-devel-4.4.114-27 is installed OR kernel-rt_debug-4.4.114-27 is installed OR kernel-rt_debug-devel-4.4.114-27 is installed OR kernel-source-rt-4.4.114-27 is installed OR kernel-syms-rt-4.4.114-27 is installed OR ocfs2-kmp-rt-4.4.114-27 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.138-3.14 is installed OR dlm-kmp-rt-4.4.138-3.14 is installed OR gfs2-kmp-rt-4.4.138-3.14 is installed OR kernel-devel-rt-4.4.138-3.14 is installed OR kernel-rt-4.4.138-3.14 is installed OR kernel-rt-base-4.4.138-3.14 is installed OR kernel-rt-devel-4.4.138-3.14 is installed OR kernel-rt_debug-4.4.138-3.14 is installed OR kernel-rt_debug-devel-4.4.138-3.14 is installed OR kernel-source-rt-4.4.138-3.14 is installed OR kernel-syms-rt-4.4.138-3.14 is installed OR ocfs2-kmp-rt-4.4.138-3.14 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information dbus-1-1.2.10-3.25.2 is installed OR dbus-1-32bit-1.2.10-3.25.2 is installed OR dbus-1-x11-1.2.10-3.25.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND kvm-0.15.1-0.27.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND kvm-0.15.1-0.27.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND coreutils-8.12-6.25.29.1 is installed OR coreutils-lang-8.12-6.25.29.1 is installed OR coreutils-x86-8.12-6.25.29.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND coreutils-8.12-6.25.29.1 is installed OR coreutils-lang-8.12-6.25.29.1 is installed OR coreutils-x86-8.12-6.25.29.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information MozillaFirefox-45.6.0esr-66.1 is installed OR MozillaFirefox-translations-45.6.0esr-66.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information ghostscript-fonts-other-8.62-32.34.1 is installed OR ghostscript-fonts-rus-8.62-32.34.1 is installed OR ghostscript-fonts-std-8.62-32.34.1 is installed OR ghostscript-library-8.62-32.34.1 is installed OR ghostscript-omni-8.62-32.34.1 is installed OR ghostscript-x11-8.62-32.34.1 is installed OR libgimpprint-4.2.7-32.34.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information xorg-x11-libXext-7.4-1.18.2 is installed OR xorg-x11-libXext-32bit-7.4-1.18.2 is installed OR xorg-x11-libXext-x86-7.4-1.18.2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information gdk-pixbuf-loader-rsvg-2.40.2-1 is installed OR librsvg-2-2-2.40.2-1 is installed OR librsvg-2-2-32bit-2.40.2-1 is installed OR rsvg-view-2.40.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND coolkey-1.1.0-147 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_67-60_64_24-default-7-2.1 is installed OR kgraft-patch-3_12_67-60_64_24-xen-7-2.1 is installed OR kgraft-patch-SLE12-SP1_Update_11-7-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information at-3.1.14-7 is installed OR flex-2.5.37-8 is installed OR flex-32bit-2.5.37-8 is installed OR libQtWebKit4-4.8.6+2.3.3-3 is installed OR libQtWebKit4-32bit-4.8.6+2.3.3-3 is installed OR libbonobo-2.32.1-16 is installed OR libbonobo-32bit-2.32.1-16 is installed OR libbonobo-doc-2.32.1-16 is installed OR libbonobo-lang-2.32.1-16 is installed OR libkde4-4.12.0-7 is installed OR libkde4-32bit-4.12.0-7 is installed OR libkdecore4-4.12.0-7 is installed OR libkdecore4-32bit-4.12.0-7 is installed OR libksuseinstall1-4.12.0-7 is installed OR libksuseinstall1-32bit-4.12.0-7 is installed OR libnetpbm11-10.66.3-4 is installed OR libnetpbm11-32bit-10.66.3-4 is installed OR netpbm-10.66.3-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information evince-3.20.1-5 is installed OR evince-browser-plugin-3.20.1-5 is installed OR evince-lang-3.20.1-5 is installed OR evince-plugin-djvudocument-3.20.1-5 is installed OR evince-plugin-dvidocument-3.20.1-5 is installed OR evince-plugin-pdfdocument-3.20.1-5 is installed OR evince-plugin-psdocument-3.20.1-5 is installed OR evince-plugin-tiffdocument-3.20.1-5 is installed OR evince-plugin-xpsdocument-3.20.1-5 is installed OR libevdocument3-4-3.20.1-5 is installed OR libevview3-3-3.20.1-5 is installed OR nautilus-evince-3.20.1-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information dbus-1-1.8.22-29.10 is installed OR dbus-1-x11-1.8.22-29.10 is installed OR libdbus-1-3-1.8.22-29.10 is installed OR libdbus-1-3-32bit-1.8.22-29.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information apache2-2.4.10-14.17.1 is installed OR apache2-doc-2.4.10-14.17.1 is installed OR apache2-example-pages-2.4.10-14.17.1 is installed OR apache2-prefork-2.4.10-14.17.1 is installed OR apache2-utils-2.4.10-14.17.1 is installed OR apache2-worker-2.4.10-14.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information libdcerpc-atsvc0-4.2.4-28.24 is installed OR samba-4.2.4-28.24 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_55-52_45-default-2-2 is installed OR kgraft-patch-3_12_55-52_45-xen-2-2 is installed OR kgraft-patch-SLE12_Update_13-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND sudo-1.8.10p3-2.16 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND apache2-mod_fcgid-2.2-31.27.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information finch-2.6.6-0.23.1 is installed OR finch-devel-2.6.6-0.23.1 is installed OR libpurple-2.6.6-0.23.1 is installed OR libpurple-devel-2.6.6-0.23.1 is installed OR libpurple-lang-2.6.6-0.23.1 is installed OR pidgin-2.6.6-0.23.1 is installed OR pidgin-devel-2.6.6-0.23.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information ImageMagick-6.4.3.6-7.30.1 is installed OR ImageMagick-devel-6.4.3.6-7.30.1 is installed OR libMagick++-devel-6.4.3.6-7.30.1 is installed OR libMagick++1-6.4.3.6-7.30.1 is installed OR libMagickWand1-6.4.3.6-7.30.1 is installed OR libMagickWand1-32bit-6.4.3.6-7.30.1 is installed OR perl-PerlMagick-6.4.3.6-7.30.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information libmysqlclient-devel-10.0.25-6 is installed OR libmysqlclient_r18-10.0.25-6 is installed OR libmysqld-devel-10.0.25-6 is installed OR libmysqld18-10.0.25-6 is installed OR mariadb-10.0.25-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information ghostscript-9.15-17 is installed OR ghostscript-devel-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libbotan-1_10-0-1.10.9-3 is installed OR libbotan-devel-1.10.9-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND dbus-1-glib-devel-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information rhythmbox-3.4-6 is installed OR rhythmbox-lang-3.4-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information finch-2.12.0-1 is installed OR libpurple-2.12.0-1 is installed OR libpurple-branding-upstream-2.12.0-1 is installed OR libpurple-lang-2.12.0-1 is installed OR libpurple-plugin-sametime-2.12.0-1 is installed OR libpurple-tcl-2.12.0-1 is installed OR pidgin-2.12.0-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND bogofilter-1.2.4-5 is installed
BACK