Oval Definition:	oval:org.opensuse.security:def:7019
Revision Date: 2021-03-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 18 for SLE 15 SP1) (Important) Description: This update for the Linux Kernel 4.12.14-197_67 fixes several issues. The following security issues were fixed: - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could have granted unintended write access because of a race condition in a THP mapcount check (bsc#1179664). - Fixed an issue where NFS client filesystems got unmounted on fail-over (bsc#1182468). - CVE-2021-3347: Fixed a use-after-free in the PI futexes during fault handling, allowing local users to execute code in the kernel (bsc#1181553). - CVE-2020-27786: Fixed a potential user after free which could have led to memory corruption or privilege escalation (bsc#1179616). - CVE-2020-28374: Fixed insufficient identifier checking in the LIO SCSI target code which could have been used by remote attackers to read or write files via directory traversal in an XCOPY request (bsc#1178684). - CVE-2021-0342: Fixed a potential memory corruption due to a use after free which could have led to local escalation of privilege with System execution privileges required (bsc#1180859). Family: unix Class: patch Status: Reference(s): 1178684 1179616 1179664 1180859 1181553 1182468 CVE-2006-4484 CVE-2009-0163 CVE-2009-0696 CVE-2009-1886 CVE-2009-1888 CVE-2009-2813 CVE-2009-2820 CVE-2009-2906 CVE-2009-2948 CVE-2009-3553 CVE-2009-4022 CVE-2010-0393 CVE-2010-0540 CVE-2010-0542 CVE-2010-0547 CVE-2010-0728 CVE-2010-0787 CVE-2010-0926 CVE-2010-1635 CVE-2010-1642 CVE-2010-1748 CVE-2010-2063 CVE-2010-2074 CVE-2010-2240 CVE-2010-2941 CVE-2010-3069 CVE-2010-3613 CVE-2010-3614 CVE-2010-3615 CVE-2011-0414 CVE-2011-0461 CVE-2011-0719 CVE-2011-1907 CVE-2011-1910 CVE-2011-2464 CVE-2011-2522 CVE-2011-2694 CVE-2011-4313 CVE-2012-0817 CVE-2012-0870 CVE-2012-1182 CVE-2012-1667 CVE-2012-2111 CVE-2012-3817 CVE-2012-3868 CVE-2012-4244 CVE-2012-4504 CVE-2012-4929 CVE-2012-5166 CVE-2012-5519 CVE-2012-5688 CVE-2012-5689 CVE-2012-6094 CVE-2012-6150 CVE-2013-0172 CVE-2013-0213 CVE-2013-0214 CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 CVE-2013-0454 CVE-2013-1863 CVE-2013-1940 CVE-2013-2266 CVE-2013-4124 CVE-2013-4143 CVE-2013-4396 CVE-2013-4408 CVE-2013-4475 CVE-2013-4476 CVE-2013-4496 CVE-2013-4854 CVE-2013-6424 CVE-2013-6442 CVE-2014-0011 CVE-2014-0178 CVE-2014-0239 CVE-2014-0244 CVE-2014-0591 CVE-2014-2856 CVE-2014-3493 CVE-2014-3537 CVE-2014-3560 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 CVE-2014-5461 CVE-2014-8240 CVE-2014-8500 CVE-2015-0255 CVE-2015-1349 CVE-2015-4041 CVE-2015-4042 CVE-2015-4620 CVE-2015-5477 CVE-2015-5722 CVE-2015-7555 CVE-2016-1602 CVE-2016-3977 CVE-2016-9434 CVE-2016-9435 CVE-2016-9436 CVE-2016-9437 CVE-2016-9438 CVE-2016-9439 CVE-2016-9440 CVE-2016-9441 CVE-2016-9442 CVE-2016-9443 CVE-2016-9621 CVE-2016-9622 CVE-2016-9623 CVE-2016-9624 CVE-2016-9625 CVE-2016-9626 CVE-2016-9627 CVE-2016-9628 CVE-2016-9629 CVE-2016-9630 CVE-2016-9631 CVE-2016-9632 CVE-2016-9633 CVE-2018-19636 CVE-2018-19637 CVE-2018-19638 CVE-2018-19639 CVE-2018-19640 CVE-2018-6196 CVE-2018-6197 CVE-2018-6198 CVE-2019-13104 CVE-2019-13106 CVE-2020-27786 CVE-2020-28374 CVE-2020-29368 CVE-2021-0342 CVE-2021-3347 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Live Patching 15 SP1 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information krb5-mini-1.12.1-19 is installed OR krb5-mini-devel-1.12.1-19 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information libreoffice-5.1.5.2-29 is installed OR libreoffice-sdk-5.1.5.2-29 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libpoppler-cpp0-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.156-94.57 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information ImageMagick-6.4.3.6-7.26.1 is installed OR libMagick++1-6.4.3.6-7.26.1 is installed OR libMagickCore1-6.4.3.6-7.26.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.26.1 is installed OR libMagickWand1-6.4.3.6-7.26.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-17.0.9esr-0.7.1 is installed OR MozillaFirefox-translations-17.0.9esr-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.41.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.41.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information ntp-4.2.6p5-31 is installed OR ntp-doc-4.2.6p5-31 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libpcre1-8.39-5 is installed OR libpcre1-32bit-8.39-5 is installed OR libpcre16-0-8.39-5 is installed OR libpcrecpp0-8.39-5 is installed OR libpcrecpp0-32bit-8.39-5 is installed OR pcre-8.39-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libsystemd0-228-150.9 is installed OR libsystemd0-32bit-228-150.9 is installed OR libudev1-228-150.9 is installed OR libudev1-32bit-228-150.9 is installed OR systemd-228-150.9 is installed OR systemd-32bit-228-150.9 is installed OR systemd-bash-completion-228-150.9 is installed OR systemd-sysvinit-228-150.9 is installed OR udev-228-150.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information libXvnc1-1.6.0-18.23 is installed OR tigervnc-1.6.0-18.23 is installed OR xorg-x11-Xvnc-1.6.0-18.23 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_48-default-7-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-7-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-7-2 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND supportutils-3.0.3-95.27 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP1 is installed AND kernel-livepatch-4_12_14-197_67-default-4-2.2 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.58-14 is installed OR kernel-compute-base-3.12.58-14 is installed OR kernel-compute-devel-3.12.58-14 is installed OR kernel-compute_debug-3.12.58-14 is installed OR kernel-compute_debug-devel-3.12.58-14 is installed OR kernel-devel-rt-3.12.58-14 is installed OR kernel-rt-3.12.58-14 is installed OR kernel-rt-base-3.12.58-14 is installed OR kernel-rt-devel-3.12.58-14 is installed OR kernel-rt_debug-3.12.58-14 is installed OR kernel-rt_debug-devel-3.12.58-14 is installed OR kernel-source-rt-3.12.58-14 is installed OR kernel-syms-rt-3.12.58-14 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.138-3.14 is installed OR dlm-kmp-rt-4.4.138-3.14 is installed OR gfs2-kmp-rt-4.4.138-3.14 is installed OR kernel-devel-rt-4.4.138-3.14 is installed OR kernel-rt-4.4.138-3.14 is installed OR kernel-rt-base-4.4.138-3.14 is installed OR kernel-rt-devel-4.4.138-3.14 is installed OR kernel-rt_debug-4.4.138-3.14 is installed OR kernel-rt_debug-devel-4.4.138-3.14 is installed OR kernel-source-rt-4.4.138-3.14 is installed OR kernel-syms-rt-4.4.138-3.14 is installed OR ocfs2-kmp-rt-4.4.138-3.14 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-LTSS is installed AND Package Information xorg-x11-libX11-7.4-5.11.11.7 is installed OR xorg-x11-libX11-32bit-7.4-5.11.11.7 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND cifs-utils-5.1-0.7.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND cifs-utils-5.1-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information bind-9.9.6P1-0.19.1 is installed OR bind-chrootenv-9.9.6P1-0.19.1 is installed OR bind-devel-9.9.6P1-0.19.1 is installed OR bind-doc-9.9.6P1-0.19.1 is installed OR bind-libs-9.9.6P1-0.19.1 is installed OR bind-libs-32bit-9.9.6P1-0.19.1 is installed OR bind-utils-9.9.6P1-0.19.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-24.6.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.48 is installed OR MozillaFirefox-translations-24.6.0esr-0.8.1 is installed OR libfreebl3-3.16.1-0.8.1 is installed OR libfreebl3-32bit-3.16.1-0.8.1 is installed OR libfreebl3-x86-3.16.1-0.8.1 is installed OR libsoftokn3-3.16.1-0.8.1 is installed OR libsoftokn3-32bit-3.16.1-0.8.1 is installed OR libsoftokn3-x86-3.16.1-0.8.1 is installed OR mozilla-nspr-4.10.6-0.3.1 is installed OR mozilla-nspr-32bit-4.10.6-0.3.1 is installed OR mozilla-nspr-x86-4.10.6-0.3.1 is installed OR mozilla-nss-3.16.1-0.8.1 is installed OR mozilla-nss-32bit-3.16.1-0.8.1 is installed OR mozilla-nss-tools-3.16.1-0.8.1 is installed OR mozilla-nss-x86-3.16.1-0.8.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-24.6.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.48 is installed OR MozillaFirefox-translations-24.6.0esr-0.8.1 is installed OR libfreebl3-3.16.1-0.8.1 is installed OR libfreebl3-32bit-3.16.1-0.8.1 is installed OR libfreebl3-x86-3.16.1-0.8.1 is installed OR libsoftokn3-3.16.1-0.8.1 is installed OR libsoftokn3-32bit-3.16.1-0.8.1 is installed OR libsoftokn3-x86-3.16.1-0.8.1 is installed OR mozilla-nspr-4.10.6-0.3.1 is installed OR mozilla-nspr-32bit-4.10.6-0.3.1 is installed OR mozilla-nspr-x86-4.10.6-0.3.1 is installed OR mozilla-nss-3.16.1-0.8.1 is installed OR mozilla-nss-32bit-3.16.1-0.8.1 is installed OR mozilla-nss-tools-3.16.1-0.8.1 is installed OR mozilla-nss-x86-3.16.1-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information libicu-4.0-7.26.15 is installed OR libicu-32bit-4.0-7.26.15 is installed OR libicu-doc-4.0-7.26.15 is installed OR libicu-x86-4.0-7.26.15 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information libgcc_s1-4.8.3+r212056-2.17 is installed OR libgcc_s1-32bit-4.8.3+r212056-2.17 is installed OR libgcc_s1-x86-4.8.3+r212056-2.17 is installed OR libgfortran3-4.8.3+r212056-2.17 is installed OR libgomp1-4.8.3+r212056-2.17 is installed OR libgomp1-32bit-4.8.3+r212056-2.17 is installed OR libquadmath0-4.8.3+r212056-2.17 is installed OR libstdc++6-4.8.3+r212056-2.17 is installed OR libstdc++6-32bit-4.8.3+r212056-2.17 is installed OR libstdc++6-x86-4.8.3+r212056-2.17 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libldap-openssl1-2_4-2-2.4.26-0.30.2 is installed OR libldap-openssl1-2_4-2-32bit-2.4.26-0.30.2 is installed OR libldap-openssl1-2_4-2-x86-2.4.26-0.30.2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-1 is installed OR aaa_base-extras-13.2+git20140911.61c1681-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information bind-9.9.6P1-30 is installed OR bind-chrootenv-9.9.6P1-30 is installed OR bind-doc-9.9.6P1-30 is installed OR bind-libs-9.9.6P1-30 is installed OR bind-libs-32bit-9.9.6P1-30 is installed OR bind-utils-9.9.6P1-30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information glibc-2.19-40.6.1 is installed OR glibc-32bit-2.19-40.6.1 is installed OR glibc-devel-2.19-40.6.1 is installed OR glibc-devel-32bit-2.19-40.6.1 is installed OR glibc-html-2.19-40.6.1 is installed OR glibc-i18ndata-2.19-40.6.1 is installed OR glibc-info-2.19-40.6.1 is installed OR glibc-locale-2.19-40.6.1 is installed OR glibc-locale-32bit-2.19-40.6.1 is installed OR glibc-profile-2.19-40.6.1 is installed OR glibc-profile-32bit-2.19-40.6.1 is installed OR nscd-2.19-40.6.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-28 is installed OR aaa_base-extras-13.2+git20140911.61c1681-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information colord-gtk-lang-0.1.26-6 is installed OR libcolord-gtk1-0.1.26-6 is installed OR libcolord2-1.3.3-12 is installed OR libcolord2-32bit-1.3.3-12 is installed OR libcolorhug2-1.3.3-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND clamav-0.100.2-33.18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_15-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information cpio-2.11-29 is installed OR cpio-lang-2.11-29 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2 is installed OR kgraft-patch-SLE12_Update_14-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information kgraft-patch-3_12_74-60_64_48-default-2-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-2-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-2-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information GraphicsMagick-1.2.5-4.33.1 is installed OR libGraphicsMagick2-1.2.5-4.33.1 is installed OR perl-GraphicsMagick-1.2.5-4.33.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information krb5-devel-1.6.3-133.49.62.1 is installed OR krb5-devel-32bit-1.6.3-133.49.62.1 is installed OR krb5-server-1.6.3-133.49.62.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information empathy-2.28.2-0.13.49 is installed OR empathy-devel-2.28.2-0.13.49 is installed OR empathy-lang-2.28.2-0.13.49 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information gstreamer-1.2.4-2.3 is installed OR gstreamer-devel-1.2.4-2.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information bind-9.9.9P1-62 is installed OR bind-devel-9.9.9P1-62 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libpcrecpp0-8.39-7 is installed OR libpcreposix0-8.39-7 is installed OR pcre-devel-8.39-7 is installed OR pcre-devel-static-8.39-7 is installed OR pcre-tools-8.39-7 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND apache-pdfbox-1.8.12-3.5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information finch-2.10.9-5 is installed OR libpurple-2.10.9-5 is installed OR libpurple-lang-2.10.9-5 is installed OR libpurple-meanwhile-2.10.9-5 is installed OR libpurple-tcl-2.10.9-5 is installed OR pidgin-2.10.9-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information colord-1.3.3-10 is installed OR colord-lang-1.3.3-10 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND libpolkit0-32bit-0.113-5.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information dia-0.97.3-15 is installed OR dia-lang-0.97.3-15 is installed
BACK