Oval Definition:	oval:org.opensuse.security:def:7175
Revision Date: 2021-09-16 Version: 1 Title: Security update for the Linux Kernel (Live Patch 16 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_70 fixes several issues. The following security issues were fixed: - CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-3656: Fixed KVM nSVM nested VMLOAD/VMSAVE interception (bsc#1189418). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278). Family: unix Class: patch Status: Reference(s): 1189278 1189418 1189420 CVE-2006-4484 CVE-2007-4129 CVE-2008-4225 CVE-2008-4226 CVE-2008-4316 CVE-2008-4409 CVE-2010-1205 CVE-2010-2800 CVE-2010-2801 CVE-2010-3170 CVE-2010-4494 CVE-2010-4651 CVE-2011-1831 CVE-2011-1832 CVE-2011-1833 CVE-2011-1834 CVE-2011-1835 CVE-2011-1836 CVE-2011-1837 CVE-2011-1944 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 CVE-2011-3026 CVE-2011-3048 CVE-2011-3328 CVE-2011-3389 CVE-2011-3464 CVE-2011-3640 CVE-2012-3386 CVE-2012-3524 CVE-2012-5112 CVE-2012-5133 CVE-2012-5134 CVE-2013-0338 CVE-2013-0743 CVE-2013-0791 CVE-2013-1620 CVE-2013-1739 CVE-2013-1740 CVE-2013-1969 CVE-2013-1989 CVE-2013-1990 CVE-2013-1999 CVE-2013-2066 CVE-2013-4238 CVE-2013-5605 CVE-2013-6393 CVE-2014-0004 CVE-2014-0191 CVE-2014-1492 CVE-2014-1568 CVE-2014-2525 CVE-2014-3660 CVE-2014-4650 CVE-2015-1196 CVE-2015-1395 CVE-2015-1396 CVE-2016-0772 CVE-2016-1000110 CVE-2016-10713 CVE-2016-5636 CVE-2016-5699 CVE-2017-18207 CVE-2018-1000156 CVE-2018-6951 CVE-2021-3653 CVE-2021-3656 CVE-2021-38198 Platform(s): openSUSE 13.1 openSUSE 13.2 openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Availability Extension 11 SP2 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP1 SUSE Linux Enterprise Real Time Extension 11 SP4 SUSE Linux Enterprise Real Time Extension 12 SP1 SUSE Linux Enterprise Real Time Extension 12 SP2 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information libreoffice-5.1.5.2-29 is installed OR libreoffice-sdk-5.1.5.2-29 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libreoffice-5.3.3.2-40.5 is installed OR libreoffice-sdk-5.3.3.2-40.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND python-pycrypto-2.6.1-10.3 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information krb5-mini-1.12.5-40.31 is installed OR krb5-mini-devel-1.12.5-40.31 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND bogofilter-1.1.1-174.27.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND a2ps-4.13-1326.37.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information xen-4.4.2_12-23.1 is installed OR xen-doc-html-4.4.2_12-23.1 is installed OR xen-kmp-default-4.4.2_12_3.0.101_63-23.1 is installed OR xen-kmp-pae-4.4.2_12_3.0.101_63-23.1 is installed OR xen-libs-4.4.2_12-23.1 is installed OR xen-libs-32bit-4.4.2_12-23.1 is installed OR xen-tools-4.4.2_12-23.1 is installed OR xen-tools-domU-4.4.2_12-23.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information finch-2.10.9-8 is installed OR libpurple-2.10.9-8 is installed OR libpurple-lang-2.10.9-8 is installed OR libpurple-meanwhile-2.10.9-8 is installed OR libpurple-tcl-2.10.9-8 is installed OR pidgin-2.10.9-8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information kernel-default-4.4.90-92.50 is installed OR kernel-default-devel-4.4.90-92.50 is installed OR kernel-default-extra-4.4.90-92.50 is installed OR kernel-devel-4.4.90-92.50 is installed OR kernel-macros-4.4.90-92.50 is installed OR kernel-source-4.4.90-92.50 is installed OR kernel-syms-4.4.90-92.50 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libwireshark8-2.2.8-48.6 is installed OR libwiretap6-2.2.8-48.6 is installed OR libwscodecs1-2.2.8-48.6 is installed OR libwsutil7-2.2.8-48.6 is installed OR wireshark-2.2.8-48.6 is installed OR wireshark-gtk-2.2.8-48.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND patch-2.7.5-8.5 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP2 is installed AND Package Information cluster-network-kmp-default-1.4_3.0.101_0.7.17-2.18.81 is installed OR cluster-network-kmp-pae-1.4_3.0.101_0.7.17-2.18.81 is installed OR cluster-network-kmp-ppc64-1.4_3.0.101_0.7.17-2.18.81 is installed OR cluster-network-kmp-trace-1.4_3.0.101_0.7.17-2.18.81 is installed OR cluster-network-kmp-xen-1.4_3.0.101_0.7.17-2.18.81 is installed OR gfs2-kmp-default-2_3.0.101_0.7.17-0.7.109 is installed OR gfs2-kmp-pae-2_3.0.101_0.7.17-0.7.109 is installed OR gfs2-kmp-ppc64-2_3.0.101_0.7.17-0.7.109 is installed OR gfs2-kmp-trace-2_3.0.101_0.7.17-0.7.109 is installed OR gfs2-kmp-xen-2_3.0.101_0.7.17-0.7.109 is installed OR ocfs2-kmp-default-1.6_3.0.101_0.7.17-0.11.80 is installed OR ocfs2-kmp-pae-1.6_3.0.101_0.7.17-0.11.80 is installed OR ocfs2-kmp-ppc64-1.6_3.0.101_0.7.17-0.11.80 is installed OR ocfs2-kmp-trace-1.6_3.0.101_0.7.17-0.11.80 is installed OR ocfs2-kmp-xen-1.6_3.0.101_0.7.17-0.11.80 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP4 is installed AND Package Information gnutls-2.4.1-24.39.57.1 is installed OR libgnutls-extra26-2.4.1-24.39.57.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_70-default-4-2.3 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information MozillaFirefox-45.3.0esr-50.1 is installed OR MozillaFirefox-translations-45.3.0esr-50.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP1 is installed AND iscsitarget-kmp-rt-1.4.19_2.6.33.5_rt23_0.4-0.7.6 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP4 is installed AND Package Information kernel-rt-3.0.101.rt130-57.1 is installed OR kernel-rt-base-3.0.101.rt130-57.1 is installed OR kernel-rt-devel-3.0.101.rt130-57.1 is installed OR kernel-rt_trace-3.0.101.rt130-57.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-57.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-57.1 is installed OR kernel-source-rt-3.0.101.rt130-57.1 is installed OR kernel-syms-rt-3.0.101.rt130-57.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP1 is installed AND Package Information kernel-compute-3.12.58-14 is installed OR kernel-compute-base-3.12.58-14 is installed OR kernel-compute-devel-3.12.58-14 is installed OR kernel-compute_debug-3.12.58-14 is installed OR kernel-compute_debug-devel-3.12.58-14 is installed OR kernel-devel-rt-3.12.58-14 is installed OR kernel-rt-3.12.58-14 is installed OR kernel-rt-base-3.12.58-14 is installed OR kernel-rt-devel-3.12.58-14 is installed OR kernel-rt_debug-3.12.58-14 is installed OR kernel-rt_debug-devel-3.12.58-14 is installed OR kernel-source-rt-3.12.58-14 is installed OR kernel-syms-rt-3.12.58-14 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP2 is installed AND Package Information cluster-md-kmp-rt-4.4.88-18 is installed OR cluster-network-kmp-rt-4.4.88-18 is installed OR dlm-kmp-rt-4.4.88-18 is installed OR gfs2-kmp-rt-4.4.88-18 is installed OR kernel-devel-rt-4.4.88-18 is installed OR kernel-rt-4.4.88-18 is installed OR kernel-rt-base-4.4.88-18 is installed OR kernel-rt-devel-4.4.88-18 is installed OR kernel-rt_debug-4.4.88-18 is installed OR kernel-rt_debug-devel-4.4.88-18 is installed OR kernel-source-rt-4.4.88-18 is installed OR kernel-syms-rt-4.4.88-18 is installed OR ocfs2-kmp-rt-4.4.88-18 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.138-3.14 is installed OR dlm-kmp-rt-4.4.138-3.14 is installed OR gfs2-kmp-rt-4.4.138-3.14 is installed OR kernel-devel-rt-4.4.138-3.14 is installed OR kernel-rt-4.4.138-3.14 is installed OR kernel-rt-base-4.4.138-3.14 is installed OR kernel-rt-devel-4.4.138-3.14 is installed OR kernel-rt_debug-4.4.138-3.14 is installed OR kernel-rt_debug-devel-4.4.138-3.14 is installed OR kernel-source-rt-4.4.138-3.14 is installed OR kernel-syms-rt-4.4.138-3.14 is installed OR ocfs2-kmp-rt-4.4.138-3.14 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information OpenEXR-1.6.1-83.17.1 is installed OR OpenEXR-32bit-1.6.1-83.17.1 is installed OR OpenEXR-x86-1.6.1-83.17.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND xen-4.1.6_04-0.5.1 is installed OR xen-doc-html-4.1.6_04-0.5.1 is installed OR xen-doc-pdf-4.1.6_04-0.5.1 is installed OR xen-kmp-default-4.1.6_04_3.0.101_0.5-0.5.1 is installed OR xen-kmp-pae-4.1.6_04_3.0.101_0.5-0.5.1 is installed OR xen-kmp-trace-4.1.6_04_3.0.101_0.5-0.5.1 is installed OR xen-libs-4.1.6_04-0.5.1 is installed OR xen-libs-32bit-4.1.6_04-0.5.1 is installed OR xen-tools-4.1.6_04-0.5.1 is installed OR xen-tools-domU-4.1.6_04-0.5.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND xen-4.1.6_04-0.5.1 is installed OR xen-doc-html-4.1.6_04-0.5.1 is installed OR xen-doc-pdf-4.1.6_04-0.5.1 is installed OR xen-kmp-default-4.1.6_04_3.0.101_0.5-0.5.1 is installed OR xen-kmp-pae-4.1.6_04_3.0.101_0.5-0.5.1 is installed OR xen-kmp-trace-4.1.6_04_3.0.101_0.5-0.5.1 is installed OR xen-libs-4.1.6_04-0.5.1 is installed OR xen-libs-32bit-4.1.6_04-0.5.1 is installed OR xen-tools-4.1.6_04-0.5.1 is installed OR xen-tools-domU-4.1.6_04-0.5.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information libopenssl-devel-0.9.8j-0.102.2 is installed OR libopenssl0_9_8-0.9.8j-0.102.2 is installed OR libopenssl0_9_8-32bit-0.9.8j-0.102.2 is installed OR libopenssl0_9_8-hmac-0.9.8j-0.102.2 is installed OR libopenssl0_9_8-hmac-32bit-0.9.8j-0.102.2 is installed OR openssl-0.9.8j-0.102.2 is installed OR openssl-doc-0.9.8j-0.102.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND kvm-1.4.2-0.22.34.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information dhcp-4.2.4.P2-0.22.1 is installed OR dhcp-client-4.2.4.P2-0.22.1 is installed OR dhcp-relay-4.2.4.P2-0.22.1 is installed OR dhcp-server-4.2.4.P2-0.22.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libopenssl1-devel-1.0.1g-0.52.1 is installed OR libopenssl1_0_0-1.0.1g-0.52.1 is installed OR libopenssl1_0_0-32bit-1.0.1g-0.52.1 is installed OR libopenssl1_0_0-x86-1.0.1g-0.52.1 is installed OR openssl1-1.0.1g-0.52.1 is installed OR openssl1-doc-1.0.1g-0.52.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information libXv1-1.0.10-3 is installed OR libXv1-32bit-1.0.10-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND coolkey-1.1.0-147 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information openvpn-2.3.8-16.17.1 is installed OR openvpn-auth-pam-plugin-2.3.8-16.17.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information augeas-1.2.0-10 is installed OR augeas-lenses-1.2.0-10 is installed OR libaugeas0-1.2.0-10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-36 is installed OR aaa_base-extras-13.2+git20140911.61c1681-36 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND gd-2.1.0-24.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information apache-commons-beanutils-1.9.2-3.3 is installed OR apache-commons-beanutils-javadoc-1.9.2-3.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_49-default-3-2.1 is installed OR kgraft-patch-3_12_60-52_49-xen-3-2.1 is installed OR kgraft-patch-SLE12_Update_14-3-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information libmysqlclient-devel-10.0.26-20.10 is installed OR libmysqlclient18-10.0.26-20.10 is installed OR libmysqlclient18-32bit-10.0.26-20.10 is installed OR libmysqlclient_r18-10.0.26-20.10 is installed OR libmysqld-devel-10.0.26-20.10 is installed OR libmysqld18-10.0.26-20.10 is installed OR mariadb-10.0.26-20.10 is installed OR mariadb-client-10.0.26-20.10 is installed OR mariadb-errormessages-10.0.26-20.10 is installed OR mariadb-tools-10.0.26-20.10 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information openvpn-2.3.8-16.17 is installed OR openvpn-auth-pam-plugin-2.3.8-16.17 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information compat-openssl098-0.9.8j-105 is installed OR libopenssl0_9_8-0.9.8j-105 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND apache2-mod_security2-2.7.1-0.2.14.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information bind-9.9.6P1-0.19.1 is installed OR bind-devel-9.9.6P1-0.19.1 is installed OR bind-devel-32bit-9.9.6P1-0.19.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND qemu-0.10.1-0.5.7.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information finch-devel-2.10.9-8 is installed OR libpurple-2.10.9-8 is installed OR libpurple-devel-2.10.9-8 is installed OR libpurple-lang-2.10.9-8 is installed OR pidgin-2.10.9-8 is installed OR pidgin-devel-2.10.9-8 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information java-1_8_0-ibm-1.8.0_sr4.1-26 is installed OR java-1_8_0-ibm-devel-1.8.0_sr4.1-26 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information ncurses-5.9-50 is installed OR ncurses-devel-5.9-50 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information glib2-devel-2.48.2-10 is installed OR glib2-devel-static-2.48.2-10 is installed OR libgio-fam-2.48.2-10 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bash-lang-4.2-75 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND bash-lang-4.3-78 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND imobiledevice-tools-1.2.0-7 is installed
BACK