Oval Definition:	oval:org.opensuse.security:def:7165
Revision Date: 2021-09-16 Version: 1 Title: Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_34 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1189278 1189418 1189420 CVE-2009-0368 CVE-2009-2666 CVE-2009-4029 CVE-2010-1167 CVE-2010-2891 CVE-2010-4341 CVE-2010-4523 CVE-2011-1758 CVE-2011-1761 CVE-2011-1947 CVE-2011-3172 CVE-2011-3389 CVE-2012-0804 CVE-2012-2396 CVE-2012-2812 CVE-2012-2813 CVE-2012-2814 CVE-2012-2836 CVE-2012-2837 CVE-2012-2840 CVE-2012-2841 CVE-2012-3482 CVE-2013-0219 CVE-2013-0220 CVE-2013-0287 CVE-2013-1982 CVE-2013-1983 CVE-2013-2001 CVE-2013-4233 CVE-2013-4234 CVE-2014-3158 CVE-2014-3467 CVE-2014-3468 CVE-2014-3469 CVE-2015-2806 CVE-2015-3310 CVE-2021-3653 CVE-2021-3656 CVE-2021-38198 Platform(s): openSUSE 13.1 openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise High Availability Extension 11 SP2 SUSE Linux Enterprise High Availability Extension 11 SP3 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP1 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE OpenStack Cloud 6 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information python-tdb-1.3.8-4 is installed OR python-tevent-0.9.26-4 is installed OR tdb-1.3.8-4 is installed OR tevent-0.9.26-4 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libreoffice-5.3.3.2-40.5 is installed OR libreoffice-sdk-5.3.3.2-40.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libudev-mini-devel-228-150.9 is installed OR libudev-mini1-228-150.9 is installed OR systemd-mini-228-150.9 is installed OR systemd-mini-devel-228-150.9 is installed OR udev-mini-228-150.9 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information avahi-0.6.32-32.3 is installed OR python-avahi-0.6.32-32.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information bind-libs-9.9.4P2-0.6.1 is installed OR bind-libs-32bit-9.9.4P2-0.6.1 is installed OR bind-utils-9.9.4P2-0.6.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information Mesa-9.0.3-0.19.1 is installed OR Mesa-32bit-9.0.3-0.19.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.36.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.36.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND mailx-12.5-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libdcerpc-binding0-4.4.2-38.14 is installed OR libdcerpc-binding0-32bit-4.4.2-38.14 is installed OR libdcerpc0-4.4.2-38.14 is installed OR libdcerpc0-32bit-4.4.2-38.14 is installed OR libndr-krb5pac0-4.4.2-38.14 is installed OR libndr-krb5pac0-32bit-4.4.2-38.14 is installed OR libndr-nbt0-4.4.2-38.14 is installed OR libndr-nbt0-32bit-4.4.2-38.14 is installed OR libndr-standard0-4.4.2-38.14 is installed OR libndr-standard0-32bit-4.4.2-38.14 is installed OR libndr0-4.4.2-38.14 is installed OR libndr0-32bit-4.4.2-38.14 is installed OR libnetapi0-4.4.2-38.14 is installed OR libnetapi0-32bit-4.4.2-38.14 is installed OR libsamba-credentials0-4.4.2-38.14 is installed OR libsamba-credentials0-32bit-4.4.2-38.14 is installed OR libsamba-errors0-4.4.2-38.14 is installed OR libsamba-errors0-32bit-4.4.2-38.14 is installed OR libsamba-hostconfig0-4.4.2-38.14 is installed OR libsamba-hostconfig0-32bit-4.4.2-38.14 is installed OR libsamba-passdb0-4.4.2-38.14 is installed OR libsamba-passdb0-32bit-4.4.2-38.14 is installed OR libsamba-util0-4.4.2-38.14 is installed OR libsamba-util0-32bit-4.4.2-38.14 is installed OR libsamdb0-4.4.2-38.14 is installed OR libsamdb0-32bit-4.4.2-38.14 is installed OR libsmbclient0-4.4.2-38.14 is installed OR libsmbclient0-32bit-4.4.2-38.14 is installed OR libsmbconf0-4.4.2-38.14 is installed OR libsmbconf0-32bit-4.4.2-38.14 is installed OR libsmbldap0-4.4.2-38.14 is installed OR libsmbldap0-32bit-4.4.2-38.14 is installed OR libtevent-util0-4.4.2-38.14 is installed OR libtevent-util0-32bit-4.4.2-38.14 is installed OR libwbclient0-4.4.2-38.14 is installed OR libwbclient0-32bit-4.4.2-38.14 is installed OR samba-4.4.2-38.14 is installed OR samba-client-4.4.2-38.14 is installed OR samba-client-32bit-4.4.2-38.14 is installed OR samba-doc-4.4.2-38.14 is installed OR samba-libs-4.4.2-38.14 is installed OR samba-libs-32bit-4.4.2-38.14 is installed OR samba-winbind-4.4.2-38.14 is installed OR samba-winbind-32bit-4.4.2-38.14 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libpoppler-glib8-0.43.0-16.5 is installed OR libpoppler-qt4-4-0.43.0-16.5 is installed OR libpoppler60-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed OR poppler-qt-0.43.0-16.5 is installed OR poppler-tools-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND opensc-0.13.0-1 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP4 is installed AND clamsap-0.98.9-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP2 is installed AND lighttpd-1.4.20-2.52.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP3 is installed AND libgnutls-extra26-2.4.1-24.39.51.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP4 is installed AND Package Information gnutls-2.4.1-24.39.60.1 is installed OR libgnutls-extra26-2.4.1-24.39.60.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_34-default-12-2.3 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information POS_Image-Minimal3-3.4.0-18.1 is installed OR POS_Image-Netboot-hooks-3.4.0-18.1 is installed OR POS_Image-Tools-3.4.0-18.1 is installed OR POS_Image3-3.5.5-18.1 is installed OR POS_Migration-3.5.5-18.1 is installed OR POS_Server-Admin3-3.5.5-18.1 is installed OR POS_Server-AdminGUI-3.5.5-18.1 is installed OR POS_Server-AdminTools3-3.5.5-18.1 is installed OR POS_Server-BranchTools3-3.5.5-18.1 is installed OR POS_Server-Modules3-3.5.5-18.1 is installed OR POS_Server3-3.5.5-18.1 is installed OR admind-1.9-18.1 is installed OR admind-client-1.9-18.1 is installed OR posbios-1.0-18.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP1 is installed AND ofed-kmp-rt-1.5.2_2.6.33.18_rt31_0.3-0.9.13.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.58-14 is installed OR kernel-compute-base-3.12.58-14 is installed OR kernel-compute-devel-3.12.58-14 is installed OR kernel-compute_debug-3.12.58-14 is installed OR kernel-compute_debug-devel-3.12.58-14 is installed OR kernel-devel-rt-3.12.58-14 is installed OR kernel-rt-3.12.58-14 is installed OR kernel-rt-base-3.12.58-14 is installed OR kernel-rt-devel-3.12.58-14 is installed OR kernel-rt_debug-3.12.58-14 is installed OR kernel-rt_debug-devel-3.12.58-14 is installed OR kernel-source-rt-3.12.58-14 is installed OR kernel-syms-rt-3.12.58-14 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.74-7.10 is installed OR cluster-network-kmp-rt-4.4.74-7.10 is installed OR dlm-kmp-rt-4.4.74-7.10 is installed OR gfs2-kmp-rt-4.4.74-7.10 is installed OR kernel-devel-rt-4.4.74-7.10 is installed OR kernel-rt-4.4.74-7.10 is installed OR kernel-rt-base-4.4.74-7.10 is installed OR kernel-rt-devel-4.4.74-7.10 is installed OR kernel-rt_debug-4.4.74-7.10 is installed OR kernel-rt_debug-devel-4.4.74-7.10 is installed OR kernel-source-rt-4.4.74-7.10 is installed OR kernel-syms-rt-4.4.74-7.10 is installed OR ocfs2-kmp-rt-4.4.74-7.10 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information acl-2.2.47-30.5.1 is installed OR libacl-2.2.47-30.5.1 is installed OR libacl-32bit-2.2.47-30.5.1 is installed OR libacl-x86-2.2.47-30.5.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS is installed AND koan-2.0.10-0.38.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND squid3-3.1.12-8.12.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND squid3-3.1.12-8.12.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information ntp-4.2.8p6-41.1 is installed OR ntp-doc-4.2.8p6-41.1 is installed OR yast2-ntp-client-2.17.14.1-1.12.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND apache2-mod_nss-1.0.14-0.4.25.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information coreutils-8.12-6.25.32.33.1 is installed OR coreutils-lang-8.12-6.25.32.33.1 is installed OR coreutils-x86-8.12-6.25.32.33.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libcurl4-openssl1-7.19.7-0.40.1 is installed OR libcurl4-openssl1-32bit-7.19.7-0.40.1 is installed OR libcurl4-openssl1-x86-7.19.7-0.40.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information libXext6-1.3.2-3 is installed OR libXext6-32bit-1.3.2-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information automake-1.13.4-4 is installed OR m4-1.4.16-15 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information xorg-x11-server-7.6_1.15.2-53.3.1 is installed OR xorg-x11-server-extra-7.6_1.15.2-53.3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information eog-3.20.4-7 is installed OR eog-lang-3.20.4-7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND autofs-5.1.3-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information libgudev-1_0-0-210-70.58.1 is installed OR libgudev-1_0-0-32bit-210-70.58.1 is installed OR libudev1-210-70.58.1 is installed OR libudev1-32bit-210-70.58.1 is installed OR systemd-210-70.58.1 is installed OR systemd-32bit-210-70.58.1 is installed OR systemd-bash-completion-210-70.58.1 is installed OR systemd-sysvinit-210-70.58.1 is installed OR udev-210-70.58.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND Package Information accountsservice-0.6.42-14 is installed OR accountsservice-lang-0.6.42-14 is installed OR libaccountsservice0-0.6.42-14 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information compat-libldap-2_3-0-2.3.37-16 is installed OR openldap2-2.4.39-16 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND sudo-1.8.10p3-2.19 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information java-1_7_0-openjdk-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND apache2-mod_security2-2.7.1-0.2.14.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information apache2-2.2.12-59.1 is installed OR apache2-devel-2.2.12-59.1 is installed OR apache2-doc-2.2.12-59.1 is installed OR apache2-example-pages-2.2.12-59.1 is installed OR apache2-prefork-2.2.12-59.1 is installed OR apache2-utils-2.2.12-59.1 is installed OR apache2-worker-2.2.12-59.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND postgresql94-devel-9.4.4-0.6.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information MozillaFirefox-38.5.0esr-54 is installed OR MozillaFirefox-devel-38.5.0esr-54 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information dbus-1-1.8.22-24.8 is installed OR dbus-1-devel-1.8.22-24.8 is installed OR dbus-1-devel-doc-1.8.22-24.8 is installed OR dbus-1-x11-1.8.22-24.8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libquicktime-1.2.4-14.3 is installed OR libquicktime-devel-1.2.4-14.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND gc-devel-7.2d-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information dia-0.97.2-13 is installed OR dia-lang-0.97.2-13 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND drm-kmp-default-4.9.33_k4.4.73_5-2 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND gd-32bit-2.1.0-24.9 is installed
BACK