Oval Definition:	oval:org.opensuse.security:def:7191
Revision Date: 2021-10-14 Version: 1 Title: Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_29 fixes several issues. The following security issues were fixed: - CVE-2021-38160: Fixed a bug that could lead to a data corruption or loss. This can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size in drivers/char/virtio_console.c (bsc#1190118) - CVE-2021-3640: Fixed a user-after-free bug in the function sco_sock_sendmsg which could lead to local privilege escalation. (bsc#1188613) - CVE-2021-3573: Fixed a user-after-free bug in the function hci_sock_bound_ioctl which could lead to local privilege escalation. (bsc#1187054). Family: unix Class: patch Status: Reference(s): 1187054 1188613 1190118 CVE-2008-3825 CVE-2009-1384 CVE-2009-5029 CVE-2010-1205 CVE-2011-2501 CVE-2011-3026 CVE-2011-3045 CVE-2011-3048 CVE-2011-4405 CVE-2012-0037 CVE-2012-3386 CVE-2012-3449 CVE-2012-4412 CVE-2012-4425 CVE-2013-0242 CVE-2013-1914 CVE-2013-2207 CVE-2013-4237 CVE-2013-4242 CVE-2013-4242 CVE-2013-4326 CVE-2013-4332 CVE-2013-4458 CVE-2013-4509 CVE-2013-7353 CVE-2013-7354 CVE-2013-7423 CVE-2014-0475 CVE-2014-1545 CVE-2014-2892 CVE-2014-3430 CVE-2014-3591 CVE-2014-4043 CVE-2014-5119 CVE-2014-6040 CVE-2014-7817 CVE-2014-8121 CVE-2014-9402 CVE-2015-0837 CVE-2015-1472 CVE-2015-1781 CVE-2015-7183 CVE-2016-6252 CVE-2017-12424 CVE-2018-7169 CVE-2021-3573 CVE-2021-3640 CVE-2021-38160 Platform(s): openSUSE 13.2 openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP2 SUSE Linux Enterprise High Availability Extension 11 SP4 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 12 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP2-LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND kernel-zfcpdump-3.12.69-60.64.29 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information libudev-mini-devel-228-149 is installed OR libudev-mini1-228-149 is installed OR systemd-mini-228-149 is installed OR systemd-mini-devel-228-149 is installed OR udev-mini-228-149 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libreoffice-6.0.5.2-43.38 is installed OR libreoffice-sdk-6.0.5.2-43.38 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libudev-mini-devel-228-150.66 is installed OR libudev-mini1-228-150.66 is installed OR systemd-mini-228-150.66 is installed OR systemd-mini-devel-228-150.66 is installed OR udev-mini-228-150.66 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information coreutils-8.12-6.25.29.1 is installed OR coreutils-lang-8.12-6.25.29.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information bash-3.2-147.22.1 is installed OR bash-doc-3.2-147.22.1 is installed OR libreadline5-5.2-147.22.1 is installed OR libreadline5-32bit-5.2-147.22.1 is installed OR readline-doc-5.2-147.22.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-31.8.0esr-0.10.1 is installed OR MozillaFirefox-translations-31.8.0esr-0.10.1 is installed OR libfreebl3-3.19.2_CKBI_1.98-0.10.1 is installed OR libfreebl3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nspr-4.10.8-0.5.1 is installed OR mozilla-nspr-32bit-4.10.8-0.5.1 is installed OR mozilla-nss-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-tools-3.19.2_CKBI_1.98-0.10.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information tigervnc-1.3.0-22 is installed OR xorg-x11-Xvnc-1.3.0-22 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information libXpm-3.5.11-5 is installed OR libXpm4-3.5.11-5 is installed OR libXpm4-32bit-3.5.11-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libncurses5-5.9-50 is installed OR libncurses5-32bit-5.9-50 is installed OR libncurses6-5.9-50 is installed OR libncurses6-32bit-5.9-50 is installed OR ncurses-5.9-50 is installed OR ncurses-devel-5.9-50 is installed OR ncurses-utils-5.9-50 is installed OR tack-5.9-50 is installed OR terminfo-5.9-50 is installed OR terminfo-base-5.9-50 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information python-cupshelpers-1.5.7-7 is installed OR system-config-printer-1.5.7-7 is installed OR system-config-printer-common-1.5.7-7 is installed OR system-config-printer-common-lang-1.5.7-7 is installed OR system-config-printer-dbus-service-1.5.7-7 is installed OR udev-configure-printer-1.5.7-7 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP2 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.36.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.36.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability Extension 11 SP4 is installed AND Package Information gnutls-2.4.1-24.39.60.1 is installed OR libgnutls-extra26-2.4.1-24.39.60.1 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_29-default-13-2.2 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information bsdtar-2.5.5-9.1 is installed OR libarchive2-2.5.5-9.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 12 SP3 is installed AND Package Information cluster-md-kmp-rt-4.4.147-3.20 is installed OR dlm-kmp-rt-4.4.147-3.20 is installed OR gfs2-kmp-rt-4.4.147-3.20 is installed OR kernel-devel-rt-4.4.147-3.20 is installed OR kernel-rt-4.4.147-3.20 is installed OR kernel-rt-base-4.4.147-3.20 is installed OR kernel-rt-devel-4.4.147-3.20 is installed OR kernel-rt_debug-4.4.147-3.20 is installed OR kernel-rt_debug-devel-4.4.147-3.20 is installed OR kernel-source-rt-4.4.147-3.20 is installed OR kernel-syms-rt-4.4.147-3.20 is installed OR ocfs2-kmp-rt-4.4.147-3.20 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information clamav-0.95.1-0.1.1 is installed OR libgcc43-4.3.3_20081022-11.18 is installed OR libgcc43-32bit-4.3.3_20081022-11.18 is installed OR libgcc43-x86-4.3.3_20081022-11.18 is installed OR libstdc++43-4.3.3_20081022-11.18 is installed OR libstdc++43-32bit-4.3.3_20081022-11.18 is installed OR libstdc++43-x86-4.3.3_20081022-11.18 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1-CLIENT-TOOLS is installed AND Package Information rhn-virtualization-common-5.4.15-0.15.2 is installed OR rhn-virtualization-host-5.4.15-0.15.2 is installed OR rhncfg-5.9.33-0.20.1 is installed OR rhncfg-actions-5.9.33-0.20.1 is installed OR rhncfg-client-5.9.33-0.20.1 is installed OR rhncfg-management-5.9.33-0.20.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND quota-3.16-50.39.1 is installed OR quota-nfs-3.16-50.39.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND quota-3.16-50.39.1 is installed OR quota-nfs-3.16-50.39.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2-LTSS is installed AND Package Information xorg-x11-libX11-7.4-5.11.15.1 is installed OR xorg-x11-libX11-32bit-7.4-5.11.15.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information bind-9.9.6P1-0.25.1 is installed OR bind-chrootenv-9.9.6P1-0.25.1 is installed OR bind-doc-9.9.6P1-0.25.1 is installed OR bind-libs-9.9.6P1-0.25.1 is installed OR bind-libs-32bit-9.9.6P1-0.25.1 is installed OR bind-utils-9.9.6P1-0.25.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND foomatic-filters-3.0.2-269.35.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information libgcrypt20-1.6.1-9 is installed OR libgcrypt20-32bit-1.6.1-9 is installed OR libgcrypt20-hmac-1.6.1-9 is installed OR libgcrypt20-hmac-32bit-1.6.1-9 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information dovecot22-2.2.13-2 is installed OR dovecot22-backend-mysql-2.2.13-2 is installed OR dovecot22-backend-pgsql-2.2.13-2 is installed OR dovecot22-backend-sqlite-2.2.13-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_74-60_64_40-default-2-3.1 is installed OR kgraft-patch-3_12_74-60_64_40-xen-2-3.1 is installed OR kgraft-patch-SLE12-SP1_Update_15-2-3.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information cpp48-4.8.5-30 is installed OR gcc48-4.8.5-30 is installed OR gcc48-32bit-4.8.5-30 is installed OR gcc48-c++-4.8.5-30 is installed OR gcc48-info-4.8.5-30 is installed OR gcc48-locale-4.8.5-30 is installed OR libasan0-4.8.5-30 is installed OR libasan0-32bit-4.8.5-30 is installed OR libstdc++48-devel-4.8.5-30 is installed OR libstdc++48-devel-32bit-4.8.5-30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache-commons-daemon-1.0.15-6 is installed OR apache-commons-daemon-javadoc-1.0.15-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND SuSEfirewall2-3.6.312.333-3.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information aaa_base-13.2+git20140911.61c1681-38.13 is installed OR aaa_base-extras-13.2+git20140911.61c1681-38.13 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information MozillaFirefox-45.5.1esr-93.1 is installed OR MozillaFirefox-translations-45.5.1esr-93.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND ant-1.9.4-1 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information compat-libldap-2_3-0-2.3.37-16 is installed OR openldap2-2.4.39-16 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND sudo-1.8.10p3-2.16 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND cryptctl-1.2.6-5.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information GraphicsMagick-1.2.5-4.33.1 is installed OR libGraphicsMagick2-1.2.5-4.33.1 is installed OR perl-GraphicsMagick-1.2.5-4.33.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-31.8.0esr-0.13.2 is installed OR MozillaFirefox-devel-31.8.0esr-0.13.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND rxvt-unicode-9.05-1.19.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information MozillaFirefox-31.3.0esr-15 is installed OR MozillaFirefox-devel-31.3.0esr-15 is installed OR mozilla-nss-3.17.2-12 is installed OR mozilla-nss-devel-3.17.2-12 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information gstreamer-plugins-base-1.8.3-12 is installed OR gstreamer-plugins-base-devel-1.8.3-12 is installed OR typelib-1_0-GstAllocators-1_0-1.8.3-12 is installed OR typelib-1_0-GstApp-1_0-1.8.3-12 is installed OR typelib-1_0-GstAudio-1_0-1.8.3-12 is installed OR typelib-1_0-GstFft-1_0-1.8.3-12 is installed OR typelib-1_0-GstPbutils-1_0-1.8.3-12 is installed OR typelib-1_0-GstRtp-1_0-1.8.3-12 is installed OR typelib-1_0-GstRtsp-1_0-1.8.3-12 is installed OR typelib-1_0-GstSdp-1_0-1.8.3-12 is installed OR typelib-1_0-GstTag-1_0-1.8.3-12 is installed OR typelib-1_0-GstVideo-1_0-1.8.3-12 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information java-1_7_1-ibm-1.7.1_sr4.10-38.5 is installed OR java-1_7_1-ibm-devel-1.7.1_sr4.10-38.5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information icecream-1.0.1-5 is installed OR lzo-devel-2.08-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND argyllcms-1.6.3-1 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information finch-2.10.9-8 is installed OR libpurple-2.10.9-8 is installed OR libpurple-lang-2.10.9-8 is installed OR libpurple-meanwhile-2.10.9-8 is installed OR libpurple-tcl-2.10.9-8 is installed OR pidgin-2.10.9-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information ImageMagick-6.8.8.1-33 is installed OR libMagick++-6_Q16-3-6.8.8.1-33 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-33 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information gstreamer-0_10-plugins-good-0.10.31-16 is installed OR gstreamer-0_10-plugins-good-lang-0.10.31-16 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND bogofilter-1.2.4-5 is installed
BACK