Oval Definition:	oval:org.opensuse.security:def:7000
Revision Date: 2021-02-10 Version: 1 Title: Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_45 fixes several issues. The following security issues were fixed: - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877). - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664). Family: unix Class: patch Status: Reference(s): 1179664 1179877 1180008 1180030 1180032 1180562 CVE-2006-0855 CVE-2007-1669 CVE-2009-1886 CVE-2009-1888 CVE-2009-2813 CVE-2009-2906 CVE-2009-2948 CVE-2010-0547 CVE-2010-0728 CVE-2010-0787 CVE-2010-0926 CVE-2010-1635 CVE-2010-1642 CVE-2010-2063 CVE-2010-3069 CVE-2011-0719 CVE-2011-2522 CVE-2011-2694 CVE-2011-2729 CVE-2011-3848 CVE-2011-3872 CVE-2012-0817 CVE-2012-0870 CVE-2012-1182 CVE-2012-2111 CVE-2012-3864 CVE-2012-3865 CVE-2012-3866 CVE-2012-3867 CVE-2012-4024 CVE-2012-4025 CVE-2012-5783 CVE-2012-6150 CVE-2013-0172 CVE-2013-0211 CVE-2013-0213 CVE-2013-0214 CVE-2013-0454 CVE-2013-1863 CVE-2013-2003 CVE-2013-2131 CVE-2013-3567 CVE-2013-4124 CVE-2013-4408 CVE-2013-4475 CVE-2013-4476 CVE-2013-4496 CVE-2013-4761 CVE-2013-4956 CVE-2013-6369 CVE-2013-6442 CVE-2014-0178 CVE-2014-0239 CVE-2014-0244 CVE-2014-1545 CVE-2014-3248 CVE-2014-3253 CVE-2014-3493 CVE-2014-3560 CVE-2014-3634 CVE-2015-2304 CVE-2015-8915 CVE-2015-8916 CVE-2015-8918 CVE-2015-8919 CVE-2015-8920 CVE-2015-8921 CVE-2015-8922 CVE-2015-8923 CVE-2015-8924 CVE-2015-8925 CVE-2015-8926 CVE-2015-8928 CVE-2015-8929 CVE-2015-8930 CVE-2015-8931 CVE-2015-8932 CVE-2015-8933 CVE-2015-8934 CVE-2016-1541 CVE-2016-4300 CVE-2016-4301 CVE-2016-4302 CVE-2016-4809 CVE-2016-5418 CVE-2016-5844 CVE-2016-6250 CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 CVE-2017-16899 CVE-2018-1000223 CVE-2018-19416 CVE-2018-19517 CVE-2020-0465 CVE-2020-0466 CVE-2020-29368 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-36158 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Advanced Systems Management 12 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.36-38 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.62-60.62 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-90 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.82-6.6 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information PackageKit-1.1.3-24.9 is installed OR PackageKit-branding-upstream-1.1.3-24.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND nfs-client-1.2.3-18.31.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bind-9.9.6P1-0.19.1 is installed OR bind-libs-9.9.6P1-0.19.1 is installed OR bind-libs-32bit-9.9.6P1-0.19.1 is installed OR bind-utils-9.9.6P1-0.19.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information bind-9.9.6P1-0.12.1 is installed OR bind-libs-9.9.6P1-0.12.1 is installed OR bind-libs-32bit-9.9.6P1-0.12.1 is installed OR bind-utils-9.9.6P1-0.12.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information ntp-4.2.6p5-31 is installed OR ntp-doc-4.2.6p5-31 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information libwireshark8-2.2.6-44 is installed OR libwiretap6-2.2.6-44 is installed OR libwscodecs1-2.2.6-44 is installed OR libwsutil7-2.2.6-44 is installed OR wireshark-2.2.6-44 is installed OR wireshark-gtk-2.2.6-44 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information ghostscript-9.15-17 is installed OR ghostscript-x11-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libsystemd0-228-150.9 is installed OR libsystemd0-32bit-228-150.9 is installed OR libudev1-228-150.9 is installed OR libudev1-32bit-228-150.9 is installed OR systemd-228-150.9 is installed OR systemd-32bit-228-150.9 is installed OR systemd-bash-completion-228-150.9 is installed OR systemd-sysvinit-228-150.9 is installed OR udev-228-150.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libSoundTouch0-1.7.1-5.3 is installed OR libSoundTouch0-32bit-1.7.1-5.3 is installed OR soundtouch-1.7.1-5.3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_51-default-9-2 is installed OR kgraft-patch-3_12_74-60_64_51-xen-9-2 is installed OR kgraft-patch-SLE12-SP1_Update_18-9-2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information rrdtool-1.4.7-21.3 is installed OR rrdtool-cached-1.4.7-21.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_45-default-6-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed AND Package Information puppet-3.6.2-3 is installed OR puppet-server-3.6.2-3 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.114-27 is installed OR cluster-network-kmp-rt-4.4.114-27 is installed OR dlm-kmp-rt-4.4.114-27 is installed OR gfs2-kmp-rt-4.4.114-27 is installed OR kernel-devel-rt-4.4.114-27 is installed OR kernel-rt-4.4.114-27 is installed OR kernel-rt-base-4.4.114-27 is installed OR kernel-rt-devel-4.4.114-27 is installed OR kernel-rt_debug-4.4.114-27 is installed OR kernel-rt_debug-devel-4.4.114-27 is installed OR kernel-source-rt-4.4.114-27 is installed OR kernel-syms-rt-4.4.114-27 is installed OR ocfs2-kmp-rt-4.4.114-27 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information libfreebl3-3.15.2-0.3.1 is installed OR libfreebl3-32bit-3.15.2-0.3.1 is installed OR mozilla-nspr-4.10.1-0.3.1 is installed OR mozilla-nspr-32bit-4.10.1-0.3.1 is installed OR mozilla-nss-3.15.2-0.3.1 is installed OR mozilla-nss-32bit-3.15.2-0.3.1 is installed OR mozilla-nss-tools-3.15.2-0.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND apache2-2.2.12-1.40.1 is installed OR apache2-doc-2.2.12-1.40.1 is installed OR apache2-example-pages-2.2.12-1.40.1 is installed OR apache2-prefork-2.2.12-1.40.1 is installed OR apache2-utils-2.2.12-1.40.1 is installed OR apache2-worker-2.2.12-1.40.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND apache2-2.2.12-1.40.1 is installed OR apache2-doc-2.2.12-1.40.1 is installed OR apache2-example-pages-2.2.12-1.40.1 is installed OR apache2-prefork-2.2.12-1.40.1 is installed OR apache2-utils-2.2.12-1.40.1 is installed OR apache2-worker-2.2.12-1.40.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND apache2-2.2.12-1.40.1 is installed OR apache2-doc-2.2.12-1.40.1 is installed OR apache2-example-pages-2.2.12-1.40.1 is installed OR apache2-prefork-2.2.12-1.40.1 is installed OR apache2-utils-2.2.12-1.40.1 is installed OR apache2-worker-2.2.12-1.40.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND Mesa-7.11.2-0.9.1 is installed OR Mesa-32bit-7.11.2-0.9.1 is installed OR Mesa-x86-7.11.2-0.9.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND Mesa-7.11.2-0.9.1 is installed OR Mesa-32bit-7.11.2-0.9.1 is installed OR Mesa-x86-7.11.2-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information bind-9.9.6P1-0.25.1 is installed OR bind-chrootenv-9.9.6P1-0.25.1 is installed OR bind-devel-9.9.6P1-0.25.1 is installed OR bind-doc-9.9.6P1-0.25.1 is installed OR bind-libs-9.9.6P1-0.25.1 is installed OR bind-libs-32bit-9.9.6P1-0.25.1 is installed OR bind-utils-9.9.6P1-0.25.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND kvm-1.4.1-0.11.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information ImageMagick-6.4.3.6-7.34.1 is installed OR libMagickCore1-6.4.3.6-7.34.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.34.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND kvm-1.4.2-30.5 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libopenssl1-devel-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-32bit-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-x86-1.0.1g-0.22.1 is installed OR openssl1-1.0.1g-0.22.1 is installed OR openssl1-doc-1.0.1g-0.22.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information apache-commons-daemon-1.0.15-4 is installed OR apache-commons-daemon-javadoc-1.0.15-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kernel-default-3.12.74-60.64.45.1 is installed OR kernel-default-base-3.12.74-60.64.45.1 is installed OR kernel-default-devel-3.12.74-60.64.45.1 is installed OR kernel-default-man-3.12.74-60.64.45.1 is installed OR kernel-devel-3.12.74-60.64.45.1 is installed OR kernel-macros-3.12.74-60.64.45.1 is installed OR kernel-source-3.12.74-60.64.45.1 is installed OR kernel-syms-3.12.74-60.64.45.1 is installed OR kernel-xen-3.12.74-60.64.45.1 is installed OR kernel-xen-base-3.12.74-60.64.45.1 is installed OR kernel-xen-devel-3.12.74-60.64.45.1 is installed OR kgraft-patch-3_12_74-60_64_45-default-1-4.1 is installed OR kgraft-patch-3_12_74-60_64_45-xen-1-4.1 is installed OR kgraft-patch-SLE12-SP1_Update_16-1-4.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache2-2.4.23-28 is installed OR apache2-doc-2.4.23-28 is installed OR apache2-example-pages-2.4.23-28 is installed OR apache2-prefork-2.4.23-28 is installed OR apache2-utils-2.4.23-28 is installed OR apache2-worker-2.4.23-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND ant-1.9.4-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_55-52_45-default-2-2.3 is installed OR kgraft-patch-3_12_55-52_45-xen-2-2.3 is installed OR kgraft-patch-SLE12_Update_13-2-2.3 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_44-52_18-default-6-2 is installed OR kgraft-patch-3_12_44-52_18-xen-6-2 is installed OR kgraft-patch-SLE12_Update_7-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information libspice-server1-0.12.5-10 is installed OR spice-0.12.5-10 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND cups-devel-1.3.9-8.46.48.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information gnutls-2.4.1-24.39.60.1 is installed OR libgnutls-devel-2.4.1-24.39.60.1 is installed OR libgnutls-extra-devel-2.4.1-24.39.60.1 is installed OR libgnutls-extra26-2.4.1-24.39.60.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information bind-devel-9.9.6P1-0.5.5 is installed OR bind-devel-32bit-9.9.6P1-0.5.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information libquicktime-1.2.4-10 is installed OR libquicktime-devel-1.2.4-10 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-54 is installed OR ImageMagick-devel-6.8.8.1-54 is installed OR libMagick++-6_Q16-3-6.8.8.1-54 is installed OR libMagick++-devel-6.8.8.1-54 is installed OR perl-PerlMagick-6.8.8.1-54 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND libksba-devel-1.3.0-23 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND bogofilter-1.2.4-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND bash-lang-4.3-78 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information lhasa-0.2.0-5 is installed OR liblhasa0-0.2.0-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
BACK