Oval Definition:	oval:org.opensuse.security:def:7017
Revision Date: 2021-03-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 20 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_75 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664). - CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553). - CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616). - CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684). - CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859). Family: unix Class: patch Status: Reference(s): 1178684 1179616 1179664 1180859 1181553 CVE-2008-1686 CVE-2009-0758 CVE-2009-0793 CVE-2009-3627 CVE-2010-0750 CVE-2010-2244 CVE-2011-0465 CVE-2011-1002 CVE-2011-1485 CVE-2011-4349 CVE-2012-2150 CVE-2012-2673 CVE-2013-0157 CVE-2013-1762 CVE-2013-1989 CVE-2013-2066 CVE-2013-4238 CVE-2013-4276 CVE-2013-4288 CVE-2014-0016 CVE-2014-5044 CVE-2014-9638 CVE-2014-9639 CVE-2014-9640 CVE-2015-3644 CVE-2015-6749 CVE-2016-5407 CVE-2016-9427 CVE-2017-7524 CVE-2020-27786 CVE-2020-28374 CVE-2020-29368 CVE-2021-0342 CVE-2021-3347 SUSE-SU-2021:0818-1 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.48-52.27 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information ocaml-4.02.3-6.6 is installed OR ocaml-ocamldoc-4.02.3-6.6 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.74-92.29 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information ghostscript-mini-9.25-23.13 is installed OR ghostscript-mini-devel-9.25-23.13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information ImageMagick-6.4.3.6-7.26.1 is installed OR libMagick++1-6.4.3.6-7.26.1 is installed OR libMagickCore1-6.4.3.6-7.26.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.26.1 is installed OR libMagickWand1-6.4.3.6-7.26.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information ImageMagick-6.4.3.6-7.30.1 is installed OR libMagick++1-6.4.3.6-7.30.1 is installed OR libMagickCore1-6.4.3.6-7.30.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.30.1 is installed OR libMagickWand1-6.4.3.6-7.30.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND cabextract-1.2-2.12.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND mailx-12.5-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libblkid1-2.28-42 is installed OR libblkid1-32bit-2.28-42 is installed OR libfdisk1-2.28-42 is installed OR libmount1-2.28-42 is installed OR libmount1-32bit-2.28-42 is installed OR libsmartcols1-2.28-42 is installed OR libuuid-devel-2.28-42 is installed OR libuuid1-2.28-42 is installed OR libuuid1-32bit-2.28-42 is installed OR python-libmount-2.28-42 is installed OR util-linux-2.28-42 is installed OR util-linux-lang-2.28-42 is installed OR util-linux-systemd-2.28-42 is installed OR uuidd-2.28-42 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libical-1.0.1-16.3 is installed OR libical1-1.0.1-16.3 is installed OR libical1-32bit-1.0.1-16.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libXv1-1.0.10-7 is installed OR libXv1-32bit-1.0.10-7 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_40-default-8-2 is installed OR kgraft-patch-3_12_74-60_64_40-xen-8-2 is installed OR kgraft-patch-SLE12-SP1_Update_15-8-2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND stunnel-5.00-4.3 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_75-default-3-2.2 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND python3-3.4.1-2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.114-27 is installed OR cluster-network-kmp-rt-4.4.114-27 is installed OR dlm-kmp-rt-4.4.114-27 is installed OR gfs2-kmp-rt-4.4.114-27 is installed OR kernel-devel-rt-4.4.114-27 is installed OR kernel-rt-4.4.114-27 is installed OR kernel-rt-base-4.4.114-27 is installed OR kernel-rt-devel-4.4.114-27 is installed OR kernel-rt_debug-4.4.114-27 is installed OR kernel-rt_debug-devel-4.4.114-27 is installed OR kernel-source-rt-4.4.114-27 is installed OR kernel-syms-rt-4.4.114-27 is installed OR ocfs2-kmp-rt-4.4.114-27 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information xorg-x11-Xvnc-7.4-27.40.70.1 is installed OR xorg-x11-server-7.4-27.40.70.1 is installed OR xorg-x11-server-extra-7.4-27.40.70.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND java-1_6_0-ibm-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.0-0.3.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr15.0-0.5.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND java-1_6_0-ibm-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.0-0.3.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr15.0-0.5.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND java-1_6_0-ibm-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-alsa-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-devel-1.6.0_sr16.0-0.3.1 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr15.0-0.5.1 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr15.0-0.5.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND mono-core-2.6.7-0.9.1 is installed OR mono-data-2.6.7-0.9.1 is installed OR mono-data-postgresql-2.6.7-0.9.1 is installed OR mono-data-sqlite-2.6.7-0.9.1 is installed OR mono-locale-extras-2.6.7-0.9.1 is installed OR mono-nunit-2.6.7-0.9.1 is installed OR mono-web-2.6.7-0.9.1 is installed OR mono-winforms-2.6.7-0.9.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND mono-core-2.6.7-0.9.1 is installed OR mono-data-2.6.7-0.9.1 is installed OR mono-data-postgresql-2.6.7-0.9.1 is installed OR mono-data-sqlite-2.6.7-0.9.1 is installed OR mono-locale-extras-2.6.7-0.9.1 is installed OR mono-nunit-2.6.7-0.9.1 is installed OR mono-web-2.6.7-0.9.1 is installed OR mono-winforms-2.6.7-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information bind-9.9.6P1-0.12.1 is installed OR bind-chrootenv-9.9.6P1-0.12.1 is installed OR bind-devel-9.9.6P1-0.12.1 is installed OR bind-doc-9.9.6P1-0.12.1 is installed OR bind-libs-9.9.6P1-0.12.1 is installed OR bind-libs-32bit-9.9.6P1-0.12.1 is installed OR bind-utils-9.9.6P1-0.12.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND apache2-2.2.12-1.46.1 is installed OR apache2-doc-2.2.12-1.46.1 is installed OR apache2-example-pages-2.2.12-1.46.1 is installed OR apache2-prefork-2.2.12-1.46.1 is installed OR apache2-utils-2.2.12-1.46.1 is installed OR apache2-worker-2.2.12-1.46.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND apache2-2.2.12-1.46.1 is installed OR apache2-doc-2.2.12-1.46.1 is installed OR apache2-example-pages-2.2.12-1.46.1 is installed OR apache2-prefork-2.2.12-1.46.1 is installed OR apache2-utils-2.2.12-1.46.1 is installed OR apache2-worker-2.2.12-1.46.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information libgnomesu-1.0.0-307.10.1 is installed OR libgnomesu-lang-1.0.0-307.10.1 is installed OR libgnomesu0-1.0.0-307.10.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND libexiv2-4-0.17.1-31.20 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libopenssl1-devel-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-32bit-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-x86-1.0.1g-0.22.1 is installed OR openssl1-1.0.1g-0.22.1 is installed OR openssl1-doc-1.0.1g-0.22.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information cpp48-4.8.3+r212056-6 is installed OR gcc48-4.8.3+r212056-6 is installed OR gcc48-32bit-4.8.3+r212056-6 is installed OR gcc48-c++-4.8.3+r212056-6 is installed OR gcc48-info-4.8.3+r212056-6 is installed OR gcc48-locale-4.8.3+r212056-6 is installed OR libasan0-4.8.3+r212056-6 is installed OR libasan0-32bit-4.8.3+r212056-6 is installed OR libatomic1-4.8.3+r212056-6 is installed OR libatomic1-32bit-4.8.3+r212056-6 is installed OR libffi4-4.8.3+r212056-6 is installed OR libffi4-32bit-4.8.3+r212056-6 is installed OR libgcc_s1-4.8.3+r212056-6 is installed OR libgcc_s1-32bit-4.8.3+r212056-6 is installed OR libgfortran3-4.8.3+r212056-6 is installed OR libgomp1-4.8.3+r212056-6 is installed OR libgomp1-32bit-4.8.3+r212056-6 is installed OR libitm1-4.8.3+r212056-6 is installed OR libitm1-32bit-4.8.3+r212056-6 is installed OR libquadmath0-4.8.3+r212056-6 is installed OR libstdc++48-devel-4.8.3+r212056-6 is installed OR libstdc++48-devel-32bit-4.8.3+r212056-6 is installed OR libstdc++6-4.8.3+r212056-6 is installed OR libstdc++6-32bit-4.8.3+r212056-6 is installed OR libtsan0-4.8.3+r212056-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information avahi-0.6.31-20 is installed OR avahi-lang-0.6.31-20 is installed OR avahi-utils-0.6.31-20 is installed OR libavahi-client3-0.6.31-20 is installed OR libavahi-client3-32bit-0.6.31-20 is installed OR libavahi-common3-0.6.31-20 is installed OR libavahi-common3-32bit-0.6.31-20 is installed OR libavahi-core7-0.6.31-20 is installed OR libdns_sd-0.6.31-20 is installed OR libdns_sd-32bit-0.6.31-20 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND cifs-utils-6.5-8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND chrony-2.3-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_51-52_34-default-6-2.1 is installed OR kgraft-patch-3_12_51-52_34-xen-6-2.1 is installed OR kgraft-patch-SLE12_Update_10-6-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND coolkey-1.1.0-147 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information compat-libldap-2_3-0-2.3.37-16 is installed OR openldap2-2.4.39-16 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information kgraft-patch-3_12_67-60_64_24-default-7-2 is installed OR kgraft-patch-3_12_67-60_64_24-xen-7-2 is installed OR kgraft-patch-SLE12-SP1_Update_11-7-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information libgnutls-devel-2.4.1-24.39.47.1 is installed OR libgnutls-extra-devel-2.4.1-24.39.47.1 is installed OR libgnutls-extra26-2.4.1-24.39.47.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information kdelibs4-doc-4.3.5-0.14.1 is installed OR libkde4-32bit-4.3.5-0.14.1 is installed OR libkde4-devel-4.3.5-0.14.1 is installed OR libkdecore4-32bit-4.3.5-0.14.1 is installed OR libkdecore4-devel-4.3.5-0.14.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information e2fsprogs-devel-1.41.9-2.14.3 is installed OR libcom_err-devel-1.41.9-2.14.3 is installed OR libcom_err-devel-32bit-1.41.9-2.14.3 is installed OR libext2fs-devel-1.41.9-2.14.3 is installed OR libext2fs-devel-32bit-1.41.9-2.14.3 is installed OR libext2fs2-32bit-1.41.9-2.14.3 is installed OR libext2fs2-x86-1.41.9-2.14.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information audiofile-0.3.6-10 is installed OR audiofile-devel-0.3.6-10 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information apache2-2.4.23-28 is installed OR apache2-devel-2.4.23-28 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libpacemaker-devel-1.1.16-4 is installed OR pacemaker-cts-1.1.16-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND alsa-devel-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND bash-lang-4.3-78 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND libpcsclite1-32bit-1.8.10-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information colord-1.3.3-12 is installed OR colord-lang-1.3.3-12 is installed
BACK