Oval Definition:	oval:org.opensuse.security:def:7142
Revision Date: 2021-07-28 Version: 1 Title: Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_46 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an out-of-bounds write in the filesystem layer that allows to andobtain full root privileges. (bsc#1188062) - CVE-2021-22555: Fixed an heap out-of-bounds write in net/netfilter/x_tables.c that could allow local provilege escalation. (bsc#1188116) - CVE-2020-36385: Fixed a use-after-free vulnerability reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called. (bnc#1187050) Family: unix Class: patch Status: Reference(s): 1187052 1188117 1188257 CVE-2004-0801 CVE-2009-2285 CVE-2009-2347 CVE-2010-2065 CVE-2010-2067 CVE-2010-2233 CVE-2010-2800 CVE-2010-2801 CVE-2010-3170 CVE-2010-4267 CVE-2010-4665 CVE-2011-0020 CVE-2011-0064 CVE-2011-0192 CVE-2011-0460 CVE-2011-1167 CVE-2011-2697 CVE-2011-2722 CVE-2011-3389 CVE-2011-3640 CVE-2012-0862 CVE-2012-1173 CVE-2012-2113 CVE-2012-3291 CVE-2012-3401 CVE-2012-4564 CVE-2012-6128 CVE-2013-0221 CVE-2013-0222 CVE-2013-0223 CVE-2013-0743 CVE-2013-0791 CVE-2013-1620 CVE-2013-1739 CVE-2013-1740 CVE-2013-1960 CVE-2013-1961 CVE-2013-2002 CVE-2013-2003 CVE-2013-2005 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244 CVE-2013-4325 CVE-2013-4342 CVE-2013-4566 CVE-2013-5605 CVE-2013-6402 CVE-2013-6427 CVE-2013-7098 CVE-2014-1492 CVE-2014-1568 CVE-2014-1569 CVE-2014-2892 CVE-2014-3564 CVE-2015-4000 CVE-2015-4041 CVE-2015-4042 CVE-2015-7181 CVE-2015-7182 CVE-2017-14226 CVE-2020-36385 CVE-2021-22555 CVE-2021-33909 Platform(s): openSUSE 13.1 openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP2 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise for SAP 12 SP2 SUSE Linux Enterprise High Availability Extension 11 SP2 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP1 SUSE Linux Enterprise Real Time Extension 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP4 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE OpenStack Cloud 6 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information flute-1.3.0-4 is installed OR libbase-1.1.3-4 is installed OR libfonts-1.1.3-4 is installed OR libformula-1.1.3-4 is installed OR liblayout-0.2.10-4 is installed OR libloader-1.1.3-3 is installed OR libreoffice-5.0.2.2-13 is installed OR libreoffice-sdk-5.0.2.2-13 is installed OR librepository-1.1.3-4 is installed OR librevenge-0.0.2-4 is installed OR librevenge-devel-0.0.2-4 is installed OR librevenge-generators-0_0-0-0.0.2-4 is installed OR libserializer-1.1.2-4 is installed OR mdds-0.12.1-3 is installed OR mdds-devel-0.12.1-3 is installed OR pentaho-libxml-1.1.3-4 is installed OR pentaho-reporting-flow-engine-0.9.4-4 is installed OR sac-1.3-4 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information kdelibs4-4.12.0-7 is installed OR kdelibs4-branding-upstream-4.12.0-7 is installed OR kdelibs4-core-4.12.0-7 is installed OR kdelibs4-doc-4.12.0-7 is installed OR libkde4-devel-4.12.0-7 is installed OR libkdecore4-devel-4.12.0-7 is installed OR libmdbodbc1-0.7-5 is installed OR mdbtools-0.7-5 is installed OR mdbtools-devel-0.7-5 is installed OR virtuoso-6.1.6-10 is installed OR virtuoso-drivers-6.1.6-10 is installed OR virtuoso-server-6.1.6-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libudev-mini-devel-228-132 is installed OR libudev-mini1-228-132 is installed OR systemd-mini-228-132 is installed OR systemd-mini-devel-228-132 is installed OR udev-mini-228-132 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libpoppler-cpp0-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND kernel-zfcpdump-4.12.14-95.16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.5.0esr-0.8.1 is installed OR MozillaFirefox-branding-SLED-24-0.7.36 is installed OR MozillaFirefox-translations-24.5.0esr-0.8.1 is installed OR libfreebl3-3.16-0.8.1 is installed OR libfreebl3-32bit-3.16-0.8.1 is installed OR libsoftokn3-3.16-0.8.1 is installed OR libsoftokn3-32bit-3.16-0.8.1 is installed OR mozilla-nspr-4.10.4-0.3.1 is installed OR mozilla-nspr-32bit-4.10.4-0.3.1 is installed OR mozilla-nss-3.16-0.8.1 is installed OR mozilla-nss-32bit-3.16-0.8.1 is installed OR mozilla-nss-tools-3.16-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-38.6.1esr-34.1 is installed OR MozillaFirefox-translations-38.6.1esr-34.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information flac-1.3.0-6 is installed OR libFLAC8-1.3.0-6 is installed OR libFLAC8-32bit-1.3.0-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libwireshark8-2.2.10-48.12 is installed OR libwiretap6-2.2.10-48.12 is installed OR libwscodecs1-2.2.10-48.12 is installed OR libwsutil7-2.2.10-48.12 is installed OR wireshark-2.2.10-48.12 is installed OR wireshark-gtk-2.2.10-48.12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libmysqlclient18-10.0.31-29.3 is installed OR libmysqlclient18-32bit-10.0.31-29.3 is installed OR libmysqlclient_r18-10.0.31-29.3 is installed OR libmysqlclient_r18-32bit-10.0.31-29.3 is installed OR mariadb-10.0.31-29.3 is installed OR mariadb-client-10.0.31-29.3 is installed OR mariadb-errormessages-10.0.31-29.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND libwpd-0_10-10-0.10.2-2.4 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP2 is installed AND sap_suse_cluster_connector-1.0.0-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.44.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.44.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP2 is installed AND Package Information kgraft-patch-4_4_59-92_20-default-11-2 is installed OR kgraft-patch-SLE12-SP2_Update_8-11-2 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP2 is installed AND Package Information hawk-0.5.2-0.38.16 is installed OR hawk-templates-0.5.2-0.38.16 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND conntrack-tools-1.0.0-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_46-default-9-2.2 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP2 is installed AND qemu-0.10.1-0.5.7.1 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information curl-7.19.7-1.61.1 is installed OR libcurl4-7.19.7-1.61.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP1 is installed AND iscsitarget-kmp-rt-1.4.19_2.6.33.5_rt23_0.4-0.7.6 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP3 is installed AND Package Information kernel-rt-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt-base-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt-devel-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-base-3.0.101.rt130-0.33.44.2 is installed OR kernel-rt_trace-devel-3.0.101.rt130-0.33.44.2 is installed OR kernel-source-rt-3.0.101.rt130-0.33.44.2 is installed OR kernel-syms-rt-3.0.101.rt130-0.33.44.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP4 is installed AND Package Information kernel-rt-3.0.101.rt130-65.1 is installed OR kernel-rt-base-3.0.101.rt130-65.1 is installed OR kernel-rt-devel-3.0.101.rt130-65.1 is installed OR kernel-rt_trace-3.0.101.rt130-65.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-65.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-65.1 is installed OR kernel-source-rt-3.0.101.rt130-65.1 is installed OR kernel-syms-rt-3.0.101.rt130-65.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.74-7.10 is installed OR cluster-network-kmp-rt-4.4.74-7.10 is installed OR dlm-kmp-rt-4.4.74-7.10 is installed OR gfs2-kmp-rt-4.4.74-7.10 is installed OR kernel-devel-rt-4.4.74-7.10 is installed OR kernel-rt-4.4.74-7.10 is installed OR kernel-rt-base-4.4.74-7.10 is installed OR kernel-rt-devel-4.4.74-7.10 is installed OR kernel-rt_debug-4.4.74-7.10 is installed OR kernel-rt_debug-devel-4.4.74-7.10 is installed OR kernel-source-rt-4.4.74-7.10 is installed OR kernel-syms-rt-4.4.74-7.10 is installed OR ocfs2-kmp-rt-4.4.74-7.10 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.147-3.20 is installed OR dlm-kmp-rt-4.4.147-3.20 is installed OR gfs2-kmp-rt-4.4.147-3.20 is installed OR kernel-devel-rt-4.4.147-3.20 is installed OR kernel-rt-4.4.147-3.20 is installed OR kernel-rt-base-4.4.147-3.20 is installed OR kernel-rt-devel-4.4.147-3.20 is installed OR kernel-rt_debug-4.4.147-3.20 is installed OR kernel-rt_debug-devel-4.4.147-3.20 is installed OR kernel-source-rt-4.4.147-3.20 is installed OR kernel-syms-rt-4.4.147-3.20 is installed OR ocfs2-kmp-rt-4.4.147-3.20 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information OpenEXR-1.6.1-83.17.1 is installed OR OpenEXR-32bit-1.6.1-83.17.1 is installed OR OpenEXR-x86-1.6.1-83.17.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND libotr2-3.2.0-10.3.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND libotr2-3.2.0-10.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND Package Information libvirt-0.9.6-0.21.3 is installed OR libvirt-client-0.9.6-0.21.3 is installed OR libvirt-client-32bit-0.9.6-0.21.3 is installed OR libvirt-doc-0.9.6-0.21.3 is installed OR libvirt-python-0.9.6-0.21.3 is installed OR virt-manager-0.9.0-3.19.1 is installed OR vm-install-0.5.10-0.5.1 is installed OR xen-4.1.2_20-0.5.2 is installed OR xen-doc-html-4.1.2_20-0.5.2 is installed OR xen-doc-pdf-4.1.2_20-0.5.2 is installed OR xen-kmp-default-4.1.2_20_3.0.38_0.5-0.5.2 is installed OR xen-kmp-trace-4.1.2_20_3.0.38_0.5-0.5.2 is installed OR xen-libs-4.1.2_20-0.5.2 is installed OR xen-libs-32bit-4.1.2_20-0.5.2 is installed OR xen-tools-4.1.2_20-0.5.2 is installed OR xen-tools-domU-4.1.2_20-0.5.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information libopenssl-devel-0.9.8j-0.102.2 is installed OR libopenssl0_9_8-0.9.8j-0.102.2 is installed OR libopenssl0_9_8-32bit-0.9.8j-0.102.2 is installed OR libopenssl0_9_8-hmac-0.9.8j-0.102.2 is installed OR libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2 is installed OR openssl-0.9.8j-0.102.2 is installed OR openssl-doc-0.9.8j-0.102.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information MozillaFirefox-45.4.0esr-53.1 is installed OR MozillaFirefox-translations-45.4.0esr-53.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND aaa_base-11-6.105.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information openssh-openssl1-6.6p1-10.1 is installed OR openssh-openssl1-helpers-6.6p1-10.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information gpgme-1.5.1-1 is installed OR libgpgme11-1.5.1-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND apache2-mod_nss-1.0.8-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information libspice-server1-0.12.5-10.1 is installed OR spice-0.12.5-10.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information crash-7.2.1-2 is installed OR crash-kmp-default-7.2.1_k4.12.14_94.41-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_51-52_39-default-4-2.2 is installed OR kgraft-patch-3_12_51-52_39-xen-4-2.2 is installed OR kgraft-patch-SLE12_Update_11-4-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_51-52_34-default-5-2 is installed OR kgraft-patch-3_12_51-52_34-xen-5-2 is installed OR kgraft-patch-SLE12_Update_10-5-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-97 is installed OR libopenssl0_9_8-0.9.8j-97 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND cryptctl-1.2.6-5.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND dhcp-devel-4.2.4.P2-0.11.13.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND MozillaFirefox-devel-17.0.9esr-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND mozilla-nspr-devel-4.10.7-0.3.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information libopenssl-devel-1.0.1i-9 is installed OR openssl-1.0.1i-9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.5-30.13 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.5-30.13 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libpoppler-cpp0-0.43.0-16.5.1 is installed OR libpoppler-devel-0.43.0-16.5.1 is installed OR libpoppler-glib-devel-0.43.0-16.5.1 is installed OR libpoppler-qt4-devel-0.43.0-16.5.1 is installed OR poppler-0.43.0-16.5.1 is installed OR poppler-qt-0.43.0-16.5.1 is installed OR typelib-1_0-Poppler-0_18-0.43.0-16.5.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND coolkey-devel-1.1.0-148.3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information empathy-3.10.3-1 is installed OR empathy-lang-3.10.3-1 is installed OR telepathy-mission-control-plugin-goa-3.10.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bogofilter-1.2.4-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information empathy-3.12.12-5 is installed OR empathy-lang-3.12.12-5 is installed OR telepathy-mission-control-plugin-goa-3.12.12-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND Package Information dia-0.97.3-15 is installed OR dia-lang-0.97.3-15 is installed
BACK