Oval Definition:	oval:org.opensuse.security:def:7131
Revision Date: 2021-07-27 Version: 1 Title: Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_61 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116) - CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050) Family: unix Class: patch Status: Reference(s): 1187052 1188117 1188257 CVE-2009-3736 CVE-2009-4029 CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-1150 CVE-2012-1174 CVE-2013-1752 CVE-2013-1981 CVE-2013-1997 CVE-2013-2001 CVE-2013-2004 CVE-2013-2124 CVE-2013-2186 CVE-2013-4238 CVE-2013-4288 CVE-2013-4419 CVE-2013-6401 CVE-2014-0011 CVE-2014-0050 CVE-2014-2497 CVE-2014-2667 CVE-2014-2977 CVE-2014-2978 CVE-2014-4650 CVE-2014-7300 CVE-2016-5104 CVE-2017-7435 CVE-2017-7436 CVE-2017-9269 CVE-2018-7685 CVE-2020-36385 CVE-2021-22555 CVE-2021-33909 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP2 SUSE Linux Enterprise for SAP 11 SP3 SUSE Linux Enterprise for SAP 12 SP2 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP1 SUSE Linux Enterprise Real Time Extension 11 SP4 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND kernel-zfcpdump-3.12.43-52.6 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.51-60.20 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.21-84 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.92-6.30 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information mariadb-10.2.21-3.7 is installed OR mariadb-bench-10.2.21-3.7 is installed OR mariadb-test-10.2.21-3.7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information lcms-1.17-77.16.1 is installed OR liblcms1-1.17-77.16.1 is installed OR liblcms1-32bit-1.17-77.16.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.5.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.36 is installed OR MozillaFirefox-translations-24.5.0esr-0.8.1 is installed OR libfreebl3-3.16-0.8.1 is installed OR libfreebl3-32bit-3.16-0.8.1 is installed OR libsoftokn3-3.16-0.8.1 is installed OR libsoftokn3-32bit-3.16-0.8.1 is installed OR mozilla-nspr-4.10.4-0.3.1 is installed OR mozilla-nspr-32bit-4.10.4-0.3.1 is installed OR mozilla-nss-3.16-0.8.1 is installed OR mozilla-nss-32bit-3.16-0.8.1 is installed OR mozilla-nss-tools-3.16-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND cabextract-1.2-2.12.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND openvpn-2.3.2-11 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information krb5-1.12.5-40.13 is installed OR krb5-32bit-1.12.5-40.13 is installed OR krb5-client-1.12.5-40.13 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libpoppler-glib8-0.43.0-16.5 is installed OR libpoppler-qt4-4-0.43.0-16.5 is installed OR libpoppler60-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed OR poppler-qt-0.43.0-16.5 is installed OR poppler-tools-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND libusbmuxd4-1.0.10-2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP2 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP3 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.44.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.44.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP2 is installed AND Package Information kgraft-patch-4_4_90-92_50-default-6-2 is installed OR kgraft-patch-SLE12-SP2_Update_15-6-2 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND Package Information cluster-network-kmp-bigsmp-1.4_3.0.101_0.47.55-2.28.1.21 is installed OR cluster-network-kmp-default-1.4_3.0.101_0.40-2.27.98 is installed OR cluster-network-kmp-pae-1.4_3.0.101_0.40-2.27.98 is installed OR cluster-network-kmp-ppc64-1.4_3.0.101_0.40-2.27.98 is installed OR cluster-network-kmp-trace-1.4_3.0.101_0.40-2.27.98 is installed OR cluster-network-kmp-xen-1.4_3.0.101_0.40-2.27.98 is installed OR gfs2-kmp-bigsmp-2_3.0.101_0.47.55-0.17.1.21 is installed OR gfs2-kmp-default-2_3.0.101_0.40-0.16.104 is installed OR gfs2-kmp-pae-2_3.0.101_0.40-0.16.104 is installed OR gfs2-kmp-ppc64-2_3.0.101_0.40-0.16.104 is installed OR gfs2-kmp-trace-2_3.0.101_0.40-0.16.104 is installed OR gfs2-kmp-xen-2_3.0.101_0.40-0.16.104 is installed OR ocfs2-kmp-bigsmp-1.6_3.0.101_0.47.55-0.21.1.21 is installed OR ocfs2-kmp-default-1.6_3.0.101_0.40-0.20.98 is installed OR ocfs2-kmp-pae-1.6_3.0.101_0.40-0.20.98 is installed OR ocfs2-kmp-ppc64-1.6_3.0.101_0.40-0.20.98 is installed OR ocfs2-kmp-trace-1.6_3.0.101_0.40-0.20.98 is installed OR ocfs2-kmp-xen-1.6_3.0.101_0.40-0.20.98 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_61-default-4-2.1 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information MozillaFirefox-45.2.0esr-45.2 is installed OR MozillaFirefox-branding-SLED-45.0-23.10 is installed OR MozillaFirefox-translations-45.2.0esr-45.2 is installed OR firefox-fontconfig-2.11.0-2.1 is installed OR libfreebl3-3.21.1-35.1 is installed OR libsoftokn3-3.21.1-35.1 is installed OR mozilla-nspr-4.12-29.1 is installed OR mozilla-nss-3.21.1-35.1 is installed OR mozilla-nss-tools-3.21.1-35.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP1 is installed AND iscsitarget-kmp-rt-1.4.19_2.6.33.5_rt23_0.4-0.7.6 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP4 is installed AND Package Information kernel-rt-3.0.101.rt130-51.1 is installed OR kernel-rt-base-3.0.101.rt130-51.1 is installed OR kernel-rt-devel-3.0.101.rt130-51.1 is installed OR kernel-rt_trace-3.0.101.rt130-51.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-51.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-51.1 is installed OR kernel-source-rt-3.0.101.rt130-51.1 is installed OR kernel-syms-rt-3.0.101.rt130-51.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.61-60.18 is installed OR kernel-compute-base-3.12.61-60.18 is installed OR kernel-compute-devel-3.12.61-60.18 is installed OR kernel-compute_debug-3.12.61-60.18 is installed OR kernel-compute_debug-devel-3.12.61-60.18 is installed OR kernel-devel-rt-3.12.61-60.18 is installed OR kernel-rt-3.12.61-60.18 is installed OR kernel-rt-base-3.12.61-60.18 is installed OR kernel-rt-devel-3.12.61-60.18 is installed OR kernel-rt_debug-3.12.61-60.18 is installed OR kernel-rt_debug-devel-3.12.61-60.18 is installed OR kernel-source-rt-3.12.61-60.18 is installed OR kernel-syms-rt-3.12.61-60.18 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.120-3.8 is installed OR dlm-kmp-rt-4.4.120-3.8 is installed OR gfs2-kmp-rt-4.4.120-3.8 is installed OR kernel-devel-rt-4.4.120-3.8 is installed OR kernel-rt-4.4.120-3.8 is installed OR kernel-rt-base-4.4.120-3.8 is installed OR kernel-rt-devel-4.4.120-3.8 is installed OR kernel-rt_debug-4.4.120-3.8 is installed OR kernel-rt_debug-devel-4.4.120-3.8 is installed OR kernel-source-rt-4.4.120-3.8 is installed OR kernel-syms-rt-4.4.120-3.8 is installed OR ocfs2-kmp-rt-4.4.120-3.8 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS is installed AND Package Information rhn-virtualization-common-5.4.15-0.15.2 is installed OR rhn-virtualization-host-5.4.15-0.15.2 is installed OR rhncfg-5.9.33-0.20.1 is installed OR rhncfg-actions-5.9.33-0.20.1 is installed OR rhncfg-client-5.9.33-0.20.1 is installed OR rhncfg-management-5.9.33-0.20.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND kvm-0.15.1-0.27.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND kvm-0.15.1-0.27.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND postgresql-8.3.23-0.4.1 is installed OR postgresql-contrib-8.3.23-0.4.1 is installed OR postgresql-docs-8.3.23-0.4.1 is installed OR postgresql-server-8.3.23-0.4.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND postgresql-8.3.23-0.4.1 is installed OR postgresql-contrib-8.3.23-0.4.1 is installed OR postgresql-docs-8.3.23-0.4.1 is installed OR postgresql-server-8.3.23-0.4.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information ntp-4.2.4p8-1.29.32.1 is installed OR ntp-doc-4.2.4p8-1.29.32.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND libMagickCore1-6.4.3.6-7.30.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.30.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND libMagickCore1-6.4.3.6-7.30.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.30.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND yast2-core-2.17.45-0.5.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information MozillaFirefox-38.7.0esr-37.3 is installed OR MozillaFirefox-translations-38.7.0esr-37.3 is installed OR libfreebl3-3.20.2-28.1 is installed OR libfreebl3-32bit-3.20.2-28.1 is installed OR libsoftokn3-3.20.2-28.1 is installed OR libsoftokn3-32bit-3.20.2-28.1 is installed OR mozilla-nspr-4.12-24.1 is installed OR mozilla-nspr-32bit-4.12-24.1 is installed OR mozilla-nss-3.20.2-28.1 is installed OR mozilla-nss-32bit-3.20.2-28.1 is installed OR mozilla-nss-tools-3.20.2-28.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information boost-license-1.36.0-12.6.49 is installed OR boost-license1_49_0-1.49.0-0.13.3 is installed OR libboost_program_options1_36_0-1.36.0-12.6.49 is installed OR libboost_regex1_36_0-1.36.0-12.6.49 is installed OR libboost_signals1_36_0-1.36.0-12.6.49 is installed OR libboost_system1_49_0-1.49.0-0.13.3 is installed OR libboost_thread1_36_0-1.36.0-12.6.49 is installed OR libboost_thread1_49_0-1.49.0-0.13.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information curl-openssl1-7.19.7-1.69.1 is installed OR libcurl4-openssl1-7.19.7-1.69.1 is installed OR libcurl4-openssl1-32bit-7.19.7-1.69.1 is installed OR libcurl4-openssl1-x86-7.19.7-1.69.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND gd-2.1.0-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information DirectFB-1.7.1-4 is installed OR lib++dfb-1_7-1-1.7.1-4 is installed OR libdirectfb-1_7-1-1.7.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_69-60_64_29-default-5-3.1 is installed OR kgraft-patch-3_12_69-60_64_29-xen-5-3.1 is installed OR kgraft-patch-SLE12-SP1_Update_12-5-3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND binutils-2.26.1-9.12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information bzip2-1.0.6-29 is installed OR bzip2-doc-1.0.6-29 is installed OR libbz2-1-1.0.6-29 is installed OR libbz2-1-32bit-1.0.6-29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_15-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND autofs-5.0.9-21 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2 is installed OR kgraft-patch-SLE12_Update_15-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-97 is installed OR libopenssl0_9_8-0.9.8j-97 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_120-92_70-default-3-2 is installed OR kgraft-patch-SLE12-SP2_Update_20-3-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND apache2-mod_fcgid-2.2-31.27.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND MozillaFirefox-devel-17.0.9esr-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information libxine-devel-1.1.15-23.3.9 is installed OR libxine1-1.1.15-23.3.9 is installed OR libxine1-32bit-1.1.15-23.3.9 is installed OR libxine1-gnome-vfs-1.1.15-23.3.9 is installed OR libxine1-pulse-1.1.15-23.3.9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information dbus-1-1.8.12-6 is installed OR dbus-1-devel-1.8.12-6 is installed OR dbus-1-devel-doc-1.8.12-6 is installed OR dbus-1-x11-1.8.12-6 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information build-20171128-9.3 is installed OR build-initvm-s390-20171128-9.3 is installed OR build-initvm-x86_64-20171128-9.3 is installed OR build-mkbaselibs-20171128-9.3 is installed OR obs-service-source_validator-0.7-9.3 is installed OR osc-0.162.0-15.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libudev-devel-228-150.9.3 is installed OR systemd-228-150.9.3 is installed OR systemd-devel-228-150.9.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND automake-1.13.4-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND kernel-default-extra-4.4.21-69 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information NetworkManager-1.0.12-12 is installed OR NetworkManager-lang-1.0.12-12 is installed OR typelib-1_0-NM-1_0-1.0.12-12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information NetworkManager-1.0.12-13.6 is installed OR NetworkManager-lang-1.0.12-13.6 is installed OR typelib-1_0-NM-1_0-1.0.12-13.6 is installed
BACK