Oval Definition:	oval:org.opensuse.security:def:7016
Revision Date: 2021-03-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_78 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664). - CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553). - CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616). - CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859). Family: unix Class: patch Status: Reference(s): 1179616 1179664 1180859 1181553 CVE-2009-0790 CVE-2009-2412 CVE-2009-3235 CVE-2009-4029 CVE-2010-0405 CVE-2010-0624 CVE-2010-1205 CVE-2011-0419 CVE-2011-0904 CVE-2011-0905 CVE-2011-1164 CVE-2011-1928 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 CVE-2011-2721 CVE-2011-3328 CVE-2011-3372 CVE-2011-3627 CVE-2012-1457 CVE-2012-1458 CVE-2012-1459 CVE-2012-2388 CVE-2013-1976 CVE-2013-2063 CVE-2013-2944 CVE-2013-4143 CVE-2013-5018 CVE-2013-6075 CVE-2013-6076 CVE-2013-6370 CVE-2013-6371 CVE-2013-6487 CVE-2013-6497 CVE-2013-6954 CVE-2014-0050 CVE-2014-0333 CVE-2014-2338 CVE-2014-3775 CVE-2014-4910 CVE-2014-9050 CVE-2014-9221 CVE-2014-9328 CVE-2015-1461 CVE-2015-1462 CVE-2015-1463 CVE-2015-2170 CVE-2015-2221 CVE-2015-2222 CVE-2015-2305 CVE-2015-2668 CVE-2015-4171 CVE-2015-5174 CVE-2015-5345 CVE-2015-5346 CVE-2015-5351 CVE-2015-8023 CVE-2016-0706 CVE-2016-0714 CVE-2016-0762 CVE-2016-0763 CVE-2016-3092 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 CVE-2016-6816 CVE-2016-7055 CVE-2016-7951 CVE-2016-7952 CVE-2016-8735 CVE-2016-8745 CVE-2017-11185 CVE-2017-12617 CVE-2017-15706 CVE-2017-3731 CVE-2017-3732 CVE-2017-5647 CVE-2017-5648 CVE-2017-5664 CVE-2017-7674 CVE-2017-9022 CVE-2017-9023 CVE-2018-11784 CVE-2018-1304 CVE-2018-1305 CVE-2018-1336 CVE-2018-8014 CVE-2018-8034 CVE-2018-8037 CVE-2019-0199 CVE-2019-0221 CVE-2020-27786 CVE-2020-29368 CVE-2021-0342 CVE-2021-3347 SUSE-SU-2021:0809-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.44-52.18 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information krb5-mini-1.12.1-36 is installed OR krb5-mini-devel-1.12.1-36 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libreoffice-5.3.3.2-40.5 is installed OR libreoffice-sdk-5.3.3.2-40.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.155-94.50 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information acroread-9.5.5-0.5.5.1 is installed OR acroread-cmaps-9.4.6-0.4.5.1 is installed OR acroread-fonts-ja-9.4.6-0.4.5.1 is installed OR acroread-fonts-ko-9.4.6-0.4.5.1 is installed OR acroread-fonts-zh_CN-9.4.6-0.4.5.1 is installed OR acroread-fonts-zh_TW-9.4.6-0.4.5.1 is installed OR acroread_ja-9.4.2-0.4.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.6.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.48 is installed OR MozillaFirefox-translations-24.6.0esr-0.8.1 is installed OR libfreebl3-3.16.1-0.8.1 is installed OR libfreebl3-32bit-3.16.1-0.8.1 is installed OR libsoftokn3-3.16.1-0.8.1 is installed OR libsoftokn3-32bit-3.16.1-0.8.1 is installed OR mozilla-nspr-4.10.6-0.3.1 is installed OR mozilla-nspr-32bit-4.10.6-0.3.1 is installed OR mozilla-nss-3.16.1-0.8.1 is installed OR mozilla-nss-32bit-3.16.1-0.8.1 is installed OR mozilla-nss-tools-3.16.1-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information bind-9.9.6P1-0.25.1 is installed OR bind-libs-9.9.6P1-0.25.1 is installed OR bind-libs-32bit-9.9.6P1-0.25.1 is installed OR bind-utils-9.9.6P1-0.25.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information cpio-2.11-29 is installed OR cpio-lang-2.11-29 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information java-1_7_0-openjdk-1.7.0.121-36 is installed OR java-1_7_0-openjdk-headless-1.7.0.121-36 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libquicktime-1.2.4-14.3 is installed OR libquicktime0-1.2.4-14.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libXtst6-1.2.2-7 is installed OR libXtst6-32bit-1.2.2-7 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_45-default-8-2 is installed OR kgraft-patch-3_12_74-60_64_45-xen-8-2 is installed OR kgraft-patch-SLE12-SP1_Update_16-8-2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information strongswan-5.1.3-26.5 is installed OR strongswan-doc-5.1.3-26.5 is installed OR strongswan-hmac-5.1.3-26.5 is installed OR strongswan-ipsec-5.1.3-26.5 is installed OR strongswan-libs0-5.1.3-26.5 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_78-default-3-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information nodejs6-6.9.5-7 is installed OR nodejs6-devel-6.9.5-7 is installed OR nodejs6-docs-6.9.5-7 is installed OR npm6-6.9.5-7 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.104-24 is installed OR cluster-network-kmp-rt-4.4.104-24 is installed OR dlm-kmp-rt-4.4.104-24 is installed OR gfs2-kmp-rt-4.4.104-24 is installed OR kernel-devel-rt-4.4.104-24 is installed OR kernel-rt-4.4.104-24 is installed OR kernel-rt-base-4.4.104-24 is installed OR kernel-rt-devel-4.4.104-24 is installed OR kernel-rt_debug-4.4.104-24 is installed OR kernel-rt_debug-devel-4.4.104-24 is installed OR kernel-source-rt-4.4.104-24 is installed OR kernel-syms-rt-4.4.104-24 is installed OR ocfs2-kmp-rt-4.4.104-24 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.128-3.11 is installed OR dlm-kmp-rt-4.4.128-3.11 is installed OR gfs2-kmp-rt-4.4.128-3.11 is installed OR kernel-devel-rt-4.4.128-3.11 is installed OR kernel-rt-4.4.128-3.11 is installed OR kernel-rt-base-4.4.128-3.11 is installed OR kernel-rt-devel-4.4.128-3.11 is installed OR kernel-rt_debug-4.4.128-3.11 is installed OR kernel-rt_debug-devel-4.4.128-3.11 is installed OR kernel-source-rt-4.4.128-3.11 is installed OR kernel-syms-rt-4.4.128-3.11 is installed OR ocfs2-kmp-rt-4.4.128-3.11 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND xinetd-2.3.14-130.133.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND bind-9.9.4P2-0.6.1 is installed OR bind-chrootenv-9.9.4P2-0.6.1 is installed OR bind-devel-9.9.6P1-0.5.5 is installed OR bind-doc-9.9.4P2-0.6.1 is installed OR bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-libs-x86-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND fastjar-0.95-1.24.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND fastjar-0.95-1.24.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information bsdtar-2.5.5-9.1 is installed OR libarchive2-2.5.5-9.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND a2ps-4.13-1326.37.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND a2ps-4.13-1326.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND libgdiplus0-2.6.7-0.5.76 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information libexif-0.6.17-2.14.1 is installed OR libexif-32bit-0.6.17-2.14.1 is installed OR libexif-x86-0.6.17-2.14.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libcurl4-openssl1-7.19.7-0.40.1 is installed OR libcurl4-openssl1-32bit-7.19.7-0.40.1 is installed OR libcurl4-openssl1-x86-7.19.7-0.40.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information cpio-2.11-26 is installed OR cpio-lang-2.11-26 is installed OR tar-1.27.1-2 is installed OR tar-lang-1.27.1-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information automake-1.13.4-4 is installed OR m4-1.4.16-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND chrony-2.3-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information ceph-common-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR libcephfs2-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR librados2-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR libradosstriper1-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR librbd1-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR librgw2-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR python-cephfs-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR python-rados-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR python-rbd-12.2.8+git.1536505967.080f2248ff-2.15 is installed OR python-rgw-12.2.8+git.1536505967.080f2248ff-2.15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.13 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information libopenssl1_0_0-1.0.1i-27.21.1 is installed OR libopenssl1_0_0-32bit-1.0.1i-27.21.1 is installed OR libopenssl1_0_0-hmac-1.0.1i-27.21.1 is installed OR libopenssl1_0_0-hmac-32bit-1.0.1i-27.21.1 is installed OR openssl-1.0.1i-27.21.1 is installed OR openssl-doc-1.0.1i-27.21.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information colord-gtk-lang-0.1.26-6 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-10 is installed OR libcolorhug2-1.3.3-10 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_44-52_18-default-6-2 is installed OR kgraft-patch-3_12_44-52_18-xen-6-2 is installed OR kgraft-patch-SLE12_Update_7-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information kgraft-patch-3_12_62-60_62-default-10-2 is installed OR kgraft-patch-3_12_62-60_62-xen-10-2 is installed OR kgraft-patch-SLE12-SP1_Update_7-10-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information glibc-html-2.11.3-17.45.49.1 is installed OR glibc-info-2.11.3-17.45.49.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information kdebase4-workspace-4.3.5-0.12.20.1 is installed OR kdebase4-workspace-devel-4.3.5-0.12.20.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND dhcp-devel-4.2.4.P2-0.22.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information bind-9.9.9P1-53 is installed OR bind-devel-9.9.9P1-53 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information kernel-docs-4.4.59-92.24 is installed OR kernel-obs-build-4.4.59-92.24 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND libotr-devel-4.0.0-9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND accountsservice-devel-0.6.42-16.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information libpcrecpp0-8.39-7 is installed OR libpcrecpp0-32bit-8.39-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND bogofilter-1.2.4-5 is installed
BACK