Oval Definition:	oval:org.opensuse.security:def:7156
Revision Date: 2021-08-17 Version: 1 Title: Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_34 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed an issue with KVM, related to the handling of VM_IO|VM_PFNMAP vmas, which allowed users with the ability to start and control a VM to read/write random pages of memory and could result in local privilege escalation (bsc#1186482). - CVE-2021-37576: On the powerpc platform KVM guest OS users could cause host OS memory corruption via rtas_args.nargs (bsc#1188838). - CVE-2021-3609: Fixed a local privilege escalation via a race condition in net/can/bcm.c (bsc#1187215). Family: unix Class: patch Status: Reference(s): 1186483 1188323 1188842 CVE-2007-4129 CVE-2009-0799 CVE-2009-0800 CVE-2009-1179 CVE-2009-1180 CVE-2009-1181 CVE-2009-1182 CVE-2009-1183 CVE-2009-1187 CVE-2009-1188 CVE-2009-3607 CVE-2009-3608 CVE-2009-3939 CVE-2009-4026 CVE-2009-4027 CVE-2009-4029 CVE-2009-4131 CVE-2009-4138 CVE-2009-4536 CVE-2009-4538 CVE-2010-1146 CVE-2010-1436 CVE-2010-1641 CVE-2010-2066 CVE-2010-2942 CVE-2010-2954 CVE-2010-2955 CVE-2010-3081 CVE-2010-3296 CVE-2010-3297 CVE-2010-3298 CVE-2010-3301 CVE-2010-3310 CVE-2011-0712 CVE-2011-1020 CVE-2011-1577 CVE-2011-2203 CVE-2011-3389 CVE-2011-4944 CVE-2012-0056 CVE-2012-0845 CVE-2012-1150 CVE-2012-2372 CVE-2012-2812 CVE-2012-2813 CVE-2012-2814 CVE-2012-2836 CVE-2012-2837 CVE-2012-2840 CVE-2012-2841 CVE-2013-0160 CVE-2013-0231 CVE-2013-0913 CVE-2013-1752 CVE-2013-1788 CVE-2013-1789 CVE-2013-1790 CVE-2013-1985 CVE-2013-2001 CVE-2013-2850 CVE-2013-4238 CVE-2013-4473 CVE-2013-4474 CVE-2013-4587 CVE-2013-6367 CVE-2013-6368 CVE-2013-6369 CVE-2013-6376 CVE-2014-00691 CVE-2014-0102 CVE-2014-0131 CVE-2014-0196 CVE-2014-1545 CVE-2014-2523 CVE-2014-2667 CVE-2014-3534 CVE-2014-3540 CVE-2014-3917 CVE-2014-3940 CVE-2014-4171 CVE-2014-4650 CVE-2014-4652 CVE-2014-4653 CVE-2014-4654 CVE-2014-4655 CVE-2014-4656 CVE-2014-4699 CVE-2014-4943 CVE-2014-5045 CVE-2014-5077 CVE-2014-5206 CVE-2014-5207 CVE-2014-5471 CVE-2014-5472 CVE-2014-8080 CVE-2014-8090 CVE-2014-8962 CVE-2014-9028 CVE-2015-3294 CVE-2018-10860 CVE-2021-22543 CVE-2021-3609 CVE-2021-37576 Platform(s): openSUSE 13.1 openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP1 SUSE Linux Enterprise for SAP 11 SP3 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise High Availability Extension 11 SP2 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE OpenStack Cloud 6 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information gcc5-5.3.1+r233831-9 is installed OR gcc5-go-5.3.1+r233831-9 is installed OR libgo7-5.3.1+r233831-9 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information cracklib-2.9.0-7 is installed OR cracklib-dict-small-2.9.0-7 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND kernel-zfcpdump-4.4.59-92.17 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.138-94.39 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND kernel-zfcpdump-4.12.14-95.16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.8.0esr-0.13.2 is installed OR MozillaFirefox-translations-31.8.0esr-0.13.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-38.7.0esr-37.3 is installed OR MozillaFirefox-translations-38.7.0esr-37.3 is installed OR libfreebl3-3.20.2-28.1 is installed OR libfreebl3-32bit-3.20.2-28.1 is installed OR libsoftokn3-3.20.2-28.1 is installed OR libsoftokn3-32bit-3.20.2-28.1 is installed OR mozilla-nspr-4.12-24.1 is installed OR mozilla-nspr-32bit-4.12-24.1 is installed OR mozilla-nss-3.20.2-28.1 is installed OR mozilla-nss-32bit-3.20.2-28.1 is installed OR mozilla-nss-tools-3.20.2-28.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information flac-1.3.0-6 is installed OR libFLAC8-1.3.0-6 is installed OR libFLAC8-32bit-1.3.0-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information java-1_8_0-openjdk-1.8.0.151-27.8 is installed OR java-1_8_0-openjdk-headless-1.8.0.151-27.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libical-1.0.1-16.3 is installed OR libical1-1.0.1-16.3 is installed OR libical1-32bit-1.0.1-16.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND m4-1.4.16-15 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP1 is installed AND Package Information java-1_4_2-ibm-sap-1.4.2_sr13.13-0.3.1 is installed OR java-1_4_2-ibm-sap-devel-1.4.2_sr13.13-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP3 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.36.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.36.1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.41.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.41.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP2 is installed AND Package Information hawk-0.5.2-0.38.16 is installed OR hawk-templates-0.5.2-0.38.16 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND conntrack-tools-1.0.0-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP4 is installed AND Package Information gnutls-2.4.1-24.39.67.1 is installed OR libgnutls-extra26-2.4.1-24.39.67.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_34-default-11-2.2 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information ghostscript-fonts-other-8.62-32.38.1 is installed OR ghostscript-fonts-rus-8.62-32.38.1 is installed OR ghostscript-fonts-std-8.62-32.38.1 is installed OR ghostscript-library-8.62-32.38.1 is installed OR ghostscript-omni-8.62-32.38.1 is installed OR ghostscript-x11-8.62-32.38.1 is installed OR libgimpprint-4.2.7-32.38.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.114-27 is installed OR cluster-network-kmp-rt-4.4.114-27 is installed OR dlm-kmp-rt-4.4.114-27 is installed OR gfs2-kmp-rt-4.4.114-27 is installed OR kernel-devel-rt-4.4.114-27 is installed OR kernel-rt-4.4.114-27 is installed OR kernel-rt-base-4.4.114-27 is installed OR kernel-rt-devel-4.4.114-27 is installed OR kernel-rt_debug-4.4.114-27 is installed OR kernel-rt_debug-devel-4.4.114-27 is installed OR kernel-source-rt-4.4.114-27 is installed OR kernel-syms-rt-4.4.114-27 is installed OR ocfs2-kmp-rt-4.4.114-27 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.155-3.23 is installed OR dlm-kmp-rt-4.4.155-3.23 is installed OR gfs2-kmp-rt-4.4.155-3.23 is installed OR kernel-devel-rt-4.4.155-3.23 is installed OR kernel-rt-4.4.155-3.23 is installed OR kernel-rt-base-4.4.155-3.23 is installed OR kernel-rt-devel-4.4.155-3.23 is installed OR kernel-rt_debug-4.4.155-3.23 is installed OR kernel-rt_debug-devel-4.4.155-3.23 is installed OR kernel-source-rt-4.4.155-3.23 is installed OR kernel-syms-rt-4.4.155-3.23 is installed OR ocfs2-kmp-rt-4.4.155-3.23 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND procps-3.2.7-151.3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND strongswan-4.4.0-6.21.1 is installed OR strongswan-doc-4.4.0-6.21.1 is installed OR Package Information SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND strongswan-4.4.0-6.21.1 is installed OR strongswan-doc-4.4.0-6.21.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND strongswan-4.4.0-6.21.1 is installed OR strongswan-doc-4.4.0-6.21.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND zypper-1.6.166-0.5.1 is installed OR zypper-log-1.6.166-0.5.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND zypper-1.6.166-0.5.1 is installed OR zypper-log-1.6.166-0.5.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information MozillaFirefox-38.2.0esr-10.1 is installed OR MozillaFirefox-branding-SLED-31.0-0.5.7.11 is installed OR MozillaFirefox-translations-38.2.0esr-10.1 is installed OR firefox-gcc47-4.7.2_20130108-0.37.2 is installed OR firefox-libgcc_s1-4.7.2_20130108-0.37.2 is installed OR firefox-libstdc++6-4.7.2_20130108-0.37.2 is installed OR libfreebl3-3.19.2.0-0.7.1 is installed OR libfreebl3-32bit-3.19.2.0-0.7.1 is installed OR mozilla-nss-3.19.2.0-0.7.1 is installed OR mozilla-nss-32bit-3.19.2.0-0.7.1 is installed OR mozilla-nss-devel-3.19.2.0-0.7.1 is installed OR mozilla-nss-tools-3.19.2.0-0.7.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND augeas-0.9.0-3.17.2 is installed OR augeas-lenses-0.9.0-3.17.2 is installed OR libaugeas0-0.9.0-3.17.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND augeas-0.9.0-3.17.2 is installed OR augeas-lenses-0.9.0-3.17.2 is installed OR libaugeas0-0.9.0-3.17.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information MozillaFirefox-45.4.0esr-53.1 is installed OR MozillaFirefox-translations-45.4.0esr-53.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information bash-3.2-147.27.35 is installed OR bash-doc-3.2-147.27.35 is installed OR bash-x86-3.2-147.27.35 is installed OR libreadline5-5.2-147.27.35 is installed OR libreadline5-32bit-5.2-147.27.35 is installed OR libreadline5-x86-5.2-147.27.35 is installed OR readline-doc-5.2-147.27.35 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libopenssl1-devel-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-32bit-1.0.1g-0.22.1 is installed OR libopenssl1_0_0-x86-1.0.1g-0.22.1 is installed OR openssl1-1.0.1g-0.22.1 is installed OR openssl1-doc-1.0.1g-0.22.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information kernel-default-3.12.28-4 is installed OR kernel-default-base-3.12.28-4 is installed OR kernel-default-devel-3.12.28-4 is installed OR kernel-default-man-3.12.28-4 is installed OR kernel-devel-3.12.28-4 is installed OR kernel-macros-3.12.28-4 is installed OR kernel-source-3.12.28-4 is installed OR kernel-syms-3.12.28-4 is installed OR kernel-xen-3.12.28-4 is installed OR kernel-xen-base-3.12.28-4 is installed OR kernel-xen-devel-3.12.28-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information openvpn-2.3.8-16.17.1 is installed OR openvpn-auth-pam-plugin-2.3.8-16.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information alsa-1.0.27.2-15 is installed OR alsa-docs-1.0.27.2-15 is installed OR libasound2-1.0.27.2-15 is installed OR libasound2-32bit-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND dosfstools-3.0.26-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information apache2-2.4.23-29.43 is installed OR apache2-doc-2.4.23-29.43 is installed OR apache2-example-pages-2.4.23-29.43 is installed OR apache2-prefork-2.4.23-29.43 is installed OR apache2-utils-2.4.23-29.43 is installed OR apache2-worker-2.4.23-29.43 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information openssh-6.6p1-52.1 is installed OR openssh-askpass-gnome-6.6p1-52.1 is installed OR openssh-fips-6.6p1-52.1 is installed OR openssh-helpers-6.6p1-52.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information bash-4.3-78 is installed OR bash-doc-4.3-78 is installed OR libreadline6-6.3-78 is installed OR readline-doc-6.3-78 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2 is installed OR kgraft-patch-SLE12_Update_14-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-94 is installed OR libopenssl0_9_8-0.9.8j-94 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_59-92_24-default-11-2 is installed OR kgraft-patch-SLE12-SP2_Update_9-11-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information bind-devel-9.9.4P2-0.6.1 is installed OR bind-devel-32bit-9.9.4P2-0.6.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information Mesa-devel-9.0.3-0.19.1 is installed OR Mesa-devel-32bit-9.0.3-0.19.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information pam-devel-1.1.5-0.15.9 is installed OR pam-devel-32bit-1.1.5-0.15.9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information file-5.19-9 is installed OR file-devel-5.19-9 is installed OR python-magic-5.19-9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information jasper-1.900.14-184 is installed OR libjasper-devel-1.900.14-184 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libpoppler-cpp0-0.43.0-16.5.1 is installed OR libpoppler-devel-0.43.0-16.5.1 is installed OR libpoppler-glib-devel-0.43.0-16.5.1 is installed OR libpoppler-qt4-devel-0.43.0-16.5.1 is installed OR poppler-0.43.0-16.5.1 is installed OR poppler-qt-0.43.0-16.5.1 is installed OR typelib-1_0-Poppler-0_18-0.43.0-16.5.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND file-devel-5.22-10.6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information ImageMagick-6.8.8.1-5 is installed OR libMagick++-6_Q16-3-6.8.8.1-5 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information flash-player-11.2.202.548-111 is installed OR flash-player-gnome-11.2.202.548-111 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information lhasa-0.2.0-5 is installed OR liblhasa0-0.2.0-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND cyrus-sasl-digestmd5-32bit-2.1.26-7 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND bluez-cups-5.13-5.4 is installed
BACK