Oval Definition:	oval:org.opensuse.security:def:7001
Revision Date: 2021-02-10 Version: 1 Title: Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_40 fixes several issues. The following security issues were fixed: - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0465: Fixed multiple missing bounds checks in hid-multitouch.c that could have led to local privilege escalation (bnc#1180030). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877). - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664). Family: unix Class: patch Status: Reference(s): 1179664 1179877 1180008 1180030 1180032 1180562 CVE-2009-0023 CVE-2009-1191 CVE-2009-1195 CVE-2009-1890 CVE-2009-1891 CVE-2009-1955 CVE-2009-1956 CVE-2009-2412 CVE-2009-2699 CVE-2009-2911 CVE-2009-2911 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555 CVE-2009-3560 CVE-2009-3720 CVE-2009-4273 CVE-2009-4273 CVE-2010-0408 CVE-2010-0411 CVE-2010-0411 CVE-2010-0412 CVE-2010-0412 CVE-2010-0425 CVE-2010-0434 CVE-2010-1452 CVE-2010-1623 CVE-2010-2068 CVE-2011-1097 CVE-2011-1176 CVE-2011-3192 CVE-2011-3368 CVE-2011-3607 CVE-2011-4317 CVE-2012-0021 CVE-2012-0031 CVE-2012-0053 CVE-2012-2687 CVE-2012-3499 CVE-2012-3502 CVE-2012-5643 CVE-2012-5783 CVE-2013-1896 CVE-2013-1981 CVE-2013-1982 CVE-2013-1992 CVE-2013-1997 CVE-2013-2004 CVE-2013-2249 CVE-2013-6370 CVE-2013-6371 CVE-2013-6438 CVE-2014-0098 CVE-2014-0117 CVE-2014-0118 CVE-2014-0226 CVE-2014-0231 CVE-2014-0467 CVE-2014-2855 CVE-2014-2977 CVE-2014-2978 CVE-2014-3499 CVE-2014-3523 CVE-2014-5277 CVE-2014-6407 CVE-2014-6408 CVE-2014-7141 CVE-2014-7142 CVE-2014-8242 CVE-2014-9356 CVE-2014-9357 CVE-2014-9358 CVE-2014-9512 CVE-2014-9749 CVE-2015-3627 CVE-2015-3629 CVE-2015-3630 CVE-2015-3631 CVE-2015-5276 CVE-2015-5400 CVE-2016-10002 CVE-2016-10003 CVE-2016-2390 CVE-2016-2569 CVE-2016-2570 CVE-2016-2571 CVE-2016-2572 CVE-2016-3947 CVE-2016-3948 CVE-2016-4051 CVE-2016-4052 CVE-2016-4053 CVE-2016-4054 CVE-2016-4553 CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 CVE-2016-7942 CVE-2017-16548 CVE-2017-17433 CVE-2017-17434 CVE-2018-1000024 CVE-2018-1000027 CVE-2018-1172 CVE-2018-14598 CVE-2018-14599 CVE-2018-14600 CVE-2018-19131 CVE-2018-19132 CVE-2018-5764 CVE-2019-12525 CVE-2019-12527 CVE-2019-12529 CVE-2019-12854 CVE-2019-13104 CVE-2019-13106 CVE-2019-13345 CVE-2020-0465 CVE-2020-0466 CVE-2020-29368 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-36158 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libwmf-0.2.8.4-242 is installed OR libwmf-tools-0.2.8.4-242 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information cracklib-2.9.0-7 is installed OR cracklib-dict-small-2.9.0-7 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.59-92.24 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information krb5-mini-1.12.5-40.13 is installed OR krb5-mini-devel-1.12.5-40.13 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libudev-mini-devel-228-150.58 is installed OR libudev-mini1-228-150.58 is installed OR systemd-mini-228-150.58 is installed OR systemd-mini-devel-228-150.58 is installed OR udev-mini-228-150.58 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libfreebl3-3.15.3-0.3.1 is installed OR libfreebl3-32bit-3.15.3-0.3.1 is installed OR mozilla-nspr-4.10.2-0.3.1 is installed OR mozilla-nspr-32bit-4.10.2-0.3.1 is installed OR mozilla-nss-3.15.3-0.3.1 is installed OR mozilla-nss-32bit-3.15.3-0.3.1 is installed OR mozilla-nss-tools-3.15.3-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bind-9.9.6P1-0.22.1 is installed OR bind-libs-9.9.6P1-0.22.1 is installed OR bind-libs-32bit-9.9.6P1-0.22.1 is installed OR bind-utils-9.9.6P1-0.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information bind-9.9.6P1-0.15.1 is installed OR bind-libs-9.9.6P1-0.15.1 is installed OR bind-libs-32bit-9.9.6P1-0.15.1 is installed OR bind-utils-9.9.6P1-0.15.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND openvpn-2.3.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND sudo-1.8.10p3-2.11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libX11-1.6.2-8 is installed OR libX11-6-1.6.2-8 is installed OR libX11-6-32bit-1.6.2-8 is installed OR libX11-data-1.6.2-8 is installed OR libX11-xcb1-1.6.2-8 is installed OR libX11-xcb1-32bit-1.6.2-8 is installed OR libXfixes-5.0.1-7 is installed OR libXfixes3-5.0.1-7 is installed OR libXfixes3-32bit-5.0.1-7 is installed OR libXi-1.7.4-14 is installed OR libXi6-1.7.4-14 is installed OR libXi6-32bit-1.7.4-14 is installed OR libXrender-0.9.8-7 is installed OR libXrender1-0.9.8-7 is installed OR libXrender1-32bit-0.9.8-7 is installed OR libXtst-1.2.2-7 is installed OR libXtst6-1.2.2-7 is installed OR libXtst6-32bit-1.2.2-7 is installed OR libXv-1.0.10-7 is installed OR libXv1-1.0.10-7 is installed OR libXv1-32bit-1.0.10-7 is installed OR libXvMC-1.0.8-7 is installed OR libXvMC1-1.0.8-7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libmysqlclient18-10.0.31-29.3 is installed OR libmysqlclient18-32bit-10.0.31-29.3 is installed OR libmysqlclient_r18-10.0.31-29.3 is installed OR libmysqlclient_r18-32bit-10.0.31-29.3 is installed OR mariadb-10.0.31-29.3 is installed OR mariadb-client-10.0.31-29.3 is installed OR mariadb-errormessages-10.0.31-29.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libX11-6-1.6.2-12.5 is installed OR libX11-6-32bit-1.6.2-12.5 is installed OR libX11-data-1.6.2-12.5 is installed OR libX11-xcb1-1.6.2-12.5 is installed OR libX11-xcb1-32bit-1.6.2-12.5 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_54-default-9-2 is installed OR kgraft-patch-3_12_74-60_64_54-xen-9-2 is installed OR kgraft-patch-SLE12-SP1_Update_19-9-2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND rsync-3.1.3-1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_40-default-8-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Containers 12 is installed AND docker-1.6.2-31 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.58-14 is installed OR kernel-compute-base-3.12.58-14 is installed OR kernel-compute-devel-3.12.58-14 is installed OR kernel-compute_debug-3.12.58-14 is installed OR kernel-compute_debug-devel-3.12.58-14 is installed OR kernel-devel-rt-3.12.58-14 is installed OR kernel-rt-3.12.58-14 is installed OR kernel-rt-base-3.12.58-14 is installed OR kernel-rt-devel-3.12.58-14 is installed OR kernel-rt_debug-3.12.58-14 is installed OR kernel-rt_debug-devel-3.12.58-14 is installed OR kernel-source-rt-3.12.58-14 is installed OR kernel-syms-rt-3.12.58-14 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information crash-7.1.5-15.3 is installed OR crash-kmp-rt-7.1.5_k4.4.21_6-15.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information libfreebl3-3.15.3-0.3.1 is installed OR libfreebl3-32bit-3.15.3-0.3.1 is installed OR mozilla-nspr-4.10.2-0.3.1 is installed OR mozilla-nspr-32bit-4.10.2-0.3.1 is installed OR mozilla-nss-3.15.3-0.3.1 is installed OR mozilla-nss-32bit-3.15.3-0.3.1 is installed OR mozilla-nss-tools-3.15.3-0.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND MozillaFirefox-17.0.9esr-0.3.1 is installed OR MozillaFirefox-translations-17.0.9esr-0.3.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND MozillaFirefox-17.0.9esr-0.3.1 is installed OR MozillaFirefox-translations-17.0.9esr-0.3.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND MozillaFirefox-17.0.9esr-0.3.1 is installed OR MozillaFirefox-translations-17.0.9esr-0.3.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND apache2-mod_nss-1.0.8-0.4.7.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND apache2-mod_nss-1.0.8-0.4.7.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information bind-9.9.6P1-0.30.1 is installed OR bind-chrootenv-9.9.6P1-0.30.1 is installed OR bind-devel-9.9.6P1-0.30.1 is installed OR bind-doc-9.9.6P1-0.30.1 is installed OR bind-libs-9.9.6P1-0.30.1 is installed OR bind-libs-32bit-9.9.6P1-0.30.1 is installed OR bind-utils-9.9.6P1-0.30.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information lcms-1.17-77.14.19 is installed OR liblcms1-1.17-77.14.19 is installed OR liblcms1-32bit-1.17-77.14.19 is installed OR liblcms1-x86-1.17-77.14.19 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information ImageMagick-6.4.3.6-7.37.1 is installed OR libMagickCore1-6.4.3.6-7.37.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information lcms-1.17-77.16.1 is installed OR liblcms1-1.17-77.16.1 is installed OR liblcms1-32bit-1.17-77.16.1 is installed OR liblcms1-x86-1.17-77.16.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information curl-openssl1-7.19.7-1.61.1 is installed OR libcurl4-openssl1-7.19.7-1.61.1 is installed OR libcurl4-openssl1-32bit-7.19.7-1.61.1 is installed OR libcurl4-openssl1-x86-7.19.7-1.61.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information apache2-2.4.10-6 is installed OR apache2-doc-2.4.10-6 is installed OR apache2-example-pages-2.4.10-6 is installed OR apache2-prefork-2.4.10-6 is installed OR apache2-utils-2.4.10-6 is installed OR apache2-worker-2.4.10-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_nss-1.0.14-18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache2-mod_apparmor-2.8.2-49 is installed OR apparmor-docs-2.8.2-49 is installed OR apparmor-parser-2.8.2-49 is installed OR apparmor-profiles-2.8.2-49 is installed OR apparmor-utils-2.8.2-49 is installed OR libapparmor1-2.8.2-49 is installed OR libapparmor1-32bit-2.8.2-49 is installed OR pam_apparmor-2.8.2-49 is installed OR pam_apparmor-32bit-2.8.2-49 is installed OR perl-apparmor-2.8.2-49 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-mod_nss-1.0.14-19.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information apache-commons-beanutils-1.9.2-3.3 is installed OR apache-commons-beanutils-javadoc-1.9.2-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_55-52_42-default-2-2.2 is installed OR kgraft-patch-3_12_55-52_42-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_12-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND apache2-mod_nss-1.0.14-18 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_51-52_34-default-5-2 is installed OR kgraft-patch-3_12_51-52_34-xen-5-2 is installed OR kgraft-patch-SLE12_Update_10-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information xorg-x11-server-7.6_1.15.2-53.3 is installed OR xorg-x11-server-extra-7.6_1.15.2-53.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND libcurl-devel-7.19.7-1.20.31.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information libgpgme-devel-1.1.6-25.32.1 is installed OR libgpgme11-32bit-1.1.6-25.32.1 is installed OR libgpgme11-x86-1.1.6-25.32.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information binutils-devel-2.24-3.62 is installed OR binutils-devel-32bit-2.24-3.62 is installed OR binutils-gold-2.24-3.62 is installed OR cross-ppc-binutils-2.24-3.18 is installed OR cross-spu-binutils-2.24-3.18 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information dbus-1-1.8.22-24.8 is installed OR dbus-1-devel-1.8.22-24.8 is installed OR dbus-1-devel-doc-1.8.22-24.8 is installed OR dbus-1-x11-1.8.22-24.8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libsmbclient-devel-4.4.2-31 is installed OR libwbclient-devel-4.4.2-31 is installed OR samba-4.4.2-31 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND liblcms-devel-1.19-17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information FastCGI-2.4.0-168 is installed OR FastCGI-devel-2.4.0-168 is installed OR perl-FastCGI-2.4.0-168 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information colord-1.1.7-2 is installed OR colord-lang-1.1.7-2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bogofilter-1.2.4-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND libFLAC++6-32bit-1.3.0-11 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information ImageMagick-6.8.8.1-71.85 is installed OR libMagick++-6_Q16-3-6.8.8.1-71.85 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-71.85 is installed
BACK