Oval Definition:	oval:org.opensuse.security:def:7198
Revision Date: 2021-02-10 Version: 1 Title: Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_37 fixes several issues. The following security issues were fixed: - CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations (bsc#1179779). - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877). - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664). Family: unix Class: patch Status: Reference(s): 1179664 1179779 1179877 1180008 1180032 1180562 CVE-2009-0790 CVE-2009-2625 CVE-2009-3560 CVE-2009-3627 CVE-2009-3720 CVE-2009-5044 CVE-2009-5080 CVE-2009-5081 CVE-2010-1163 CVE-2010-1646 CVE-2010-4341 CVE-2010-4651 CVE-2011-0010 CVE-2011-0020 CVE-2011-0064 CVE-2011-1758 CVE-2011-3389 CVE-2011-4944 CVE-2012-0845 CVE-2012-0876 CVE-2012-1147 CVE-2012-1148 CVE-2012-1150 CVE-2012-2337 CVE-2012-2388 CVE-2012-2396 CVE-2012-2944 CVE-2013-0219 CVE-2013-0220 CVE-2013-0287 CVE-2013-1752 CVE-2013-1775 CVE-2013-1776 CVE-2013-2944 CVE-2013-4238 CVE-2013-5018 CVE-2013-6075 CVE-2013-6076 CVE-2013-6369 CVE-2014-1829 CVE-2014-1830 CVE-2014-2338 CVE-2014-2667 CVE-2014-4650 CVE-2014-8104 CVE-2014-9680 CVE-2015-1196 CVE-2015-1395 CVE-2015-1396 CVE-2015-2590 CVE-2015-2597 CVE-2015-2601 CVE-2015-2613 CVE-2015-2619 CVE-2015-2621 CVE-2015-2625 CVE-2015-2627 CVE-2015-2628 CVE-2015-2632 CVE-2015-2637 CVE-2015-2638 CVE-2015-2659 CVE-2015-2664 CVE-2015-2808 CVE-2015-4000 CVE-2015-4729 CVE-2015-4731 CVE-2015-4732 CVE-2015-4733 CVE-2015-4734 CVE-2015-4736 CVE-2015-4748 CVE-2015-4749 CVE-2015-4760 CVE-2015-4803 CVE-2015-4805 CVE-2015-4806 CVE-2015-4810 CVE-2015-4835 CVE-2015-4840 CVE-2015-4842 CVE-2015-4843 CVE-2015-4844 CVE-2015-4860 CVE-2015-4868 CVE-2015-4872 CVE-2015-4881 CVE-2015-4882 CVE-2015-4883 CVE-2015-4893 CVE-2015-4901 CVE-2015-4902 CVE-2015-4903 CVE-2015-4906 CVE-2015-4908 CVE-2015-4911 CVE-2015-4916 CVE-2016-7032 CVE-2016-7076 CVE-2017-1000367 CVE-2017-1000368 CVE-2020-0466 CVE-2020-29368 CVE-2020-29373 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-36158 Platform(s): openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP3 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information firebird-2.5.2.26539-15 is installed OR libfbclient2-2.5.2.26539-15 is installed OR libfbclient2-devel-2.5.2.26539-15 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND python-pycrypto-2.6.1-10.3 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libudev-mini-devel-228-150.53 is installed OR libudev-mini1-228-150.53 is installed OR systemd-mini-228-150.53 is installed OR systemd-mini-devel-228-150.53 is installed OR udev-mini-228-150.53 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information gio-branding-upstream-2.48.2-12.12 is installed OR glib2-2.48.2-12.12 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-10.0.9-0.3.1 is installed OR MozillaFirefox-branding-SLED-7-0.6.7.85 is installed OR MozillaFirefox-translations-10.0.9-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-translations-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information MozillaFirefox-38.7.0esr-37.3 is installed OR MozillaFirefox-translations-38.7.0esr-37.3 is installed OR libfreebl3-3.20.2-28.1 is installed OR libfreebl3-32bit-3.20.2-28.1 is installed OR libsoftokn3-3.20.2-28.1 is installed OR libsoftokn3-32bit-3.20.2-28.1 is installed OR mozilla-nspr-4.12-24.1 is installed OR mozilla-nspr-32bit-4.12-24.1 is installed OR mozilla-nss-3.20.2-28.1 is installed OR mozilla-nss-32bit-3.20.2-28.1 is installed OR mozilla-nss-tools-3.20.2-28.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information flash-player-11.2.202.425-19 is installed OR flash-player-gnome-11.2.202.425-19 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information xen-4.7.1_06-31 is installed OR xen-libs-4.7.1_06-31 is installed OR xen-libs-32bit-4.7.1_06-31 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libquicktime-1.2.4-14.3 is installed OR libquicktime0-1.2.4-14.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND python3-requests-2.7.0-2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP4 is installed AND clamsap-0.98.9-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND python-requests-2.8.1-6.9 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_37-default-3-2.1 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information MozillaFirefox-45.4.0esr-53.1 is installed OR MozillaFirefox-translations-45.4.0esr-53.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP3 is installed AND Package Information kernel-rt-3.0.101.rt130-0.33.40.1 is installed OR kernel-rt-base-3.0.101.rt130-0.33.40.1 is installed OR kernel-rt-devel-3.0.101.rt130-0.33.40.1 is installed OR kernel-rt_trace-3.0.101.rt130-0.33.40.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-0.33.40.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-0.33.40.1 is installed OR kernel-source-rt-3.0.101.rt130-0.33.40.1 is installed OR kernel-syms-rt-3.0.101.rt130-0.33.40.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND Package Information libMagickCore1-6.4.3.6-7.19.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.19.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND squid3-3.1.12-8.12.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND squid3-3.1.12-8.12.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-31.6.0esr-0.8.1 is installed OR MozillaFirefox-translations-31.6.0esr-0.8.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-31.6.0esr-0.8.1 is installed OR MozillaFirefox-translations-31.6.0esr-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information ImageMagick-6.4.3.6-7.37.1 is installed OR libMagickCore1-6.4.3.6-7.37.1 is installed OR libMagickCore1-32bit-6.4.3.6-7.37.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information ghostscript-fonts-other-8.62-32.34.1 is installed OR ghostscript-fonts-rus-8.62-32.34.1 is installed OR ghostscript-fonts-std-8.62-32.34.1 is installed OR ghostscript-library-8.62-32.34.1 is installed OR ghostscript-omni-8.62-32.34.1 is installed OR ghostscript-x11-8.62-32.34.1 is installed OR libgimpprint-4.2.7-32.34.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information curl-openssl1-7.19.7-1.69.1 is installed OR libcurl4-openssl1-7.19.7-1.69.1 is installed OR libcurl4-openssl1-32bit-7.19.7-1.69.1 is installed OR libcurl4-openssl1-x86-7.19.7-1.69.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information libjbig2-2.0-12 is installed OR libjbig2-32bit-2.0-12 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information expat-2.1.0-13 is installed OR libexpat1-2.1.0-13 is installed OR libexpat1-32bit-2.1.0-13 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_67-60_64_18-default-9-2.1 is installed OR kgraft-patch-3_12_67-60_64_18-xen-9-2.1 is installed OR kgraft-patch-SLE12-SP1_Update_9-9-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information MozillaFirefox-45.4.0esr-81 is installed OR MozillaFirefox-translations-45.4.0esr-81 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache-commons-beanutils-1.9.2-1 is installed OR apache-commons-beanutils-javadoc-1.9.2-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information PackageKit-1.1.3-24.9 is installed OR PackageKit-backend-zypp-1.1.3-24.9 is installed OR PackageKit-lang-1.1.3-24.9 is installed OR libpackagekit-glib2-18-1.1.3-24.9 is installed OR typelib-1_0-PackageKitGlib-1_0-1.1.3-24.9 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information xen-4.4.4_05-22.25.1 is installed OR xen-doc-html-4.4.4_05-22.25.1 is installed OR xen-kmp-default-4.4.4_05_k3.12.60_52.57-22.25.1 is installed OR xen-libs-4.4.4_05-22.25.1 is installed OR xen-libs-32bit-4.4.4_05-22.25.1 is installed OR xen-tools-4.4.4_05-22.25.1 is installed OR xen-tools-domU-4.4.4_05-22.25.1 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND apache2-mod_perl-2.0.8-11 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_60-52_54-default-2-2 is installed OR kgraft-patch-3_12_60-52_54-xen-2-2 is installed OR kgraft-patch-SLE12_Update_15-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND Package Information compat-openssl098-0.9.8j-102 is installed OR libopenssl0_9_8-0.9.8j-102 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information kgraft-patch-4_4_90-92_45-default-7-2 is installed OR kgraft-patch-SLE12-SP2_Update_14-7-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND apache2-mod_security2-2.7.1-0.2.14.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information apache2-2.2.12-59.1 is installed OR apache2-devel-2.2.12-59.1 is installed OR apache2-doc-2.2.12-59.1 is installed OR apache2-example-pages-2.2.12-59.1 is installed OR apache2-prefork-2.2.12-59.1 is installed OR apache2-utils-2.2.12-59.1 is installed OR apache2-worker-2.2.12-59.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND telepathy-gabble-0.7.10-2.19.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information gnutls-3.2.15-4 is installed OR libgnutls-devel-3.2.15-4 is installed OR libgnutls-openssl-devel-3.2.15-4 is installed OR libgnutlsxx-devel-3.2.15-4 is installed OR libgnutlsxx28-3.2.15-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information libpcap-1.8.1-9 is installed OR libpcap-devel-1.8.1-9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information git-2.12.3-27.5 is installed OR git-arch-2.12.3-27.5 is installed OR git-core-2.12.3-27.5 is installed OR git-cvs-2.12.3-27.5 is installed OR git-daemon-2.12.3-27.5 is installed OR git-doc-2.12.3-27.5 is installed OR git-email-2.12.3-27.5 is installed OR git-gui-2.12.3-27.5 is installed OR git-svn-2.12.3-27.5 is installed OR git-web-2.12.3-27.5 is installed OR gitk-2.12.3-27.5 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND lib3ds-1-3-1.3.0-25 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information finch-2.10.9-5 is installed OR libpurple-2.10.9-5 is installed OR libpurple-lang-2.10.9-5 is installed OR libpurple-meanwhile-2.10.9-5 is installed OR libpurple-tcl-2.10.9-5 is installed OR pidgin-2.10.9-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND Package Information ImageMagick-6.8.8.1-8 is installed OR libMagick++-6_Q16-3-6.8.8.1-8 is installed OR libMagickCore-6_Q16-1-32bit-6.8.8.1-8 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND Package Information dia-0.97.3-15 is installed OR dia-lang-0.97.3-15 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND argyllcms-1.6.3-3 is installed
BACK