Oval Definition:	oval:org.opensuse.security:def:7201
Revision Date: 2021-02-10 Version: 1 Title: Security update for the Linux Kernel (Live Patch 4 for SLE 15 SP2) (Important) Description: This update for the Linux Kernel 5.3.18-24_24 fixes several issues. The following security issues were fixed: - CVE-2020-29373: Fixed an issue where kernel unsafely handles the root directory during path lookups, and thus a process inside a mount namespace can escape to unintended filesystem locations (bsc#1179779). - CVE-2020-36158: Fixed a potential remote code execution in the Marvell mwifiex driver (bsc#1180562). - CVE-2020-0466: Fixed a use-after-free due to a logic error in do_epoll_ctl and ep_loop_check_proc of eventpoll.c (bnc#1180032. - CVE-2020-29569: Fixed a use after free due to a logic error (bsc#1180008). - CVE-2020-29660: Fixed a locking inconsistency in the tty subsystem that may have allowed a read-after-free attack against TIOCGSID (bsc#1179877). - CVE-2020-29661: Fixed a locking issue in the tty subsystem that allowed a use-after-free attack against TIOCSPGRP (bsc#1179877). - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access because of a race condition in a THP mapcount check (bsc#1179664). Family: unix Class: patch Status: Reference(s): 1179664 1179779 1179877 1180008 1180032 1180562 CVE-2002-2443 CVE-2007-3999 CVE-2008-1420 CVE-2009-0316 CVE-2009-0844 CVE-2009-0845 CVE-2009-0846 CVE-2009-0847 CVE-2009-3295 CVE-2009-3379 CVE-2009-3736 CVE-2009-4212 CVE-2010-0283 CVE-2010-0628 CVE-2010-1205 CVE-2010-1320 CVE-2010-1321 CVE-2010-1322 CVE-2010-1323 CVE-2010-1324 CVE-2010-4020 CVE-2010-4021 CVE-2010-4022 CVE-2011-0281 CVE-2011-0282 CVE-2011-0284 CVE-2011-0285 CVE-2011-1527 CVE-2011-1528 CVE-2011-1529 CVE-2011-1530 CVE-2011-2501 CVE-2011-2690 CVE-2011-2691 CVE-2011-2692 CVE-2011-3328 CVE-2011-3602 CVE-2011-4182 CVE-2012-0444 CVE-2012-1012 CVE-2012-1013 CVE-2012-1016 CVE-2012-1152 CVE-2012-2451 CVE-2012-3547 CVE-2012-5112 CVE-2012-5133 CVE-2013-1415 CVE-2013-1417 CVE-2013-1418 CVE-2013-6954 CVE-2014-0004 CVE-2014-0333 CVE-2014-1344 CVE-2014-1384 CVE-2014-1385 CVE-2014-1386 CVE-2014-1387 CVE-2014-1388 CVE-2014-1389 CVE-2014-1390 CVE-2014-2015 CVE-2014-3634 CVE-2014-4341 CVE-2014-4342 CVE-2014-4343 CVE-2014-4344 CVE-2014-4345 CVE-2014-5351 CVE-2014-5352 CVE-2014-5353 CVE-2014-5354 CVE-2014-5355 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423 CVE-2015-1038 CVE-2015-2330 CVE-2015-2694 CVE-2015-2695 CVE-2015-2696 CVE-2015-2697 CVE-2020-0466 CVE-2020-29368 CVE-2020-29373 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-36158 Platform(s): openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Linux Enterprise Build System Kit 12 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 11 SP4 SUSE Linux Enterprise High Availability 12 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise Module for Live Patching 15 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Real Time Extension 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11-SECURITY SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for VMWare 11 SP2 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 is installed AND Package Information libreoffice-4.3.3.2-6 is installed OR libreoffice-sdk-4.3.3.2-6 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information ghostscript-mini-9.15-22 is installed OR ghostscript-mini-devel-9.15-22 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information krb5-mini-1.12.5-40.13 is installed OR krb5-mini-devel-1.12.5-40.13 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND Package Information libpoppler-cpp0-0.43.0-16.5 is installed OR poppler-0.43.0-16.5 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information libpodofo-devel-0.9.2-3.6 is installed OR podofo-0.9.2-3.6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-10.0.12-0.4.1 is installed OR MozillaFirefox-translations-10.0.12-0.4.1 is installed OR libfreebl3-3.14.1-0.3.1 is installed OR libfreebl3-32bit-3.14.1-0.3.1 is installed OR mozilla-nspr-4.9.4-0.3.1 is installed OR mozilla-nspr-32bit-4.9.4-0.3.1 is installed OR mozilla-nss-3.14.1-0.3.1 is installed OR mozilla-nss-32bit-3.14.1-0.3.1 is installed OR mozilla-nss-tools-3.14.1-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-31.8.0esr-0.10.1 is installed OR MozillaFirefox-translations-31.8.0esr-0.10.1 is installed OR libfreebl3-3.19.2_CKBI_1.98-0.10.1 is installed OR libfreebl3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-3.19.2_CKBI_1.98-0.10.1 is installed OR libsoftokn3-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nspr-4.10.8-0.5.1 is installed OR mozilla-nspr-32bit-4.10.8-0.5.1 is installed OR mozilla-nss-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-32bit-3.19.2_CKBI_1.98-0.10.1 is installed OR mozilla-nss-tools-3.19.2_CKBI_1.98-0.10.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information bind-9.9.6P1-0.12.1 is installed OR bind-libs-9.9.6P1-0.12.1 is installed OR bind-libs-32bit-9.9.6P1-0.12.1 is installed OR bind-utils-9.9.6P1-0.12.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information flac-1.3.0-6 is installed OR libFLAC8-1.3.0-6 is installed OR libFLAC8-32bit-1.3.0-6 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information compat-openssl098-0.9.8j-105 is installed OR libopenssl0_9_8-0.9.8j-105 is installed OR libopenssl0_9_8-32bit-0.9.8j-105 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information libsystemd0-228-150.9 is installed OR libsystemd0-32bit-228-150.9 is installed OR libudev1-228-150.9 is installed OR libudev1-32bit-228-150.9 is installed OR systemd-228-150.9 is installed OR systemd-32bit-228-150.9 is installed OR systemd-bash-completion-228-150.9 is installed OR systemd-sysvinit-228-150.9 is installed OR udev-228-150.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND radvd-1.9.7-2 is installed Definition Synopsis SUSE Linux Enterprise for SAP 11 SP4 is installed AND Package Information compat-openssl097g-0.9.7g-146.22.44.1 is installed OR compat-openssl097g-32bit-0.9.7g-146.22.44.1 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 is installed AND haproxy-1.5.4-2.4 is installed Definition Synopsis SUSE Linux Enterprise Module for Live Patching 15 SP2 is installed AND kernel-livepatch-5_3_18-24_24-default-5-2.1 is installed Definition Synopsis SUSE Linux Enterprise Point of Sale 11 SP3 is installed AND Package Information POS_Image-Minimal3-3.4.0-18.1 is installed OR POS_Image-Netboot-hooks-3.4.0-18.1 is installed OR POS_Image-Tools-3.4.0-18.1 is installed OR POS_Image3-3.5.5-18.1 is installed OR POS_Migration-3.5.5-18.1 is installed OR POS_Server-Admin3-3.5.5-18.1 is installed OR POS_Server-AdminGUI-3.5.5-18.1 is installed OR POS_Server-AdminTools3-3.5.5-18.1 is installed OR POS_Server-BranchTools3-3.5.5-18.1 is installed OR POS_Server-Modules3-3.5.5-18.1 is installed OR POS_Server3-3.5.5-18.1 is installed OR admind-1.9-18.1 is installed OR admind-client-1.9-18.1 is installed OR posbios-1.0-18.1 is installed Definition Synopsis SUSE Linux Enterprise Real Time Extension 11 SP4 is installed AND Package Information kernel-rt-3.0.101.rt130-54.1 is installed OR kernel-rt-base-3.0.101.rt130-54.1 is installed OR kernel-rt-devel-3.0.101.rt130-54.1 is installed OR kernel-rt_trace-3.0.101.rt130-54.1 is installed OR kernel-rt_trace-base-3.0.101.rt130-54.1 is installed OR kernel-rt_trace-devel-3.0.101.rt130-54.1 is installed OR kernel-source-rt-3.0.101.rt130-54.1 is installed OR kernel-syms-rt-3.0.101.rt130-54.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 is installed AND NetworkManager-gnome-0.7.0.r1053-11.11.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP2 is installed AND sudo-1.7.6p2-0.2.12.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP2 is installed AND sudo-1.7.6p2-0.2.12.1 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND MozillaFirefox-17.0.9esr-0.7.1 is installed OR MozillaFirefox-translations-17.0.9esr-0.7.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND MozillaFirefox-17.0.9esr-0.7.1 is installed OR MozillaFirefox-translations-17.0.9esr-0.7.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3-LTSS is installed AND Package Information bind-9.9.6P1-0.25.1 is installed OR bind-chrootenv-9.9.6P1-0.25.1 is installed OR bind-doc-9.9.6P1-0.25.1 is installed OR bind-libs-9.9.6P1-0.25.1 is installed OR bind-libs-32bit-9.9.6P1-0.25.1 is installed OR bind-utils-9.9.6P1-0.25.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND Package Information gmime-2.2.23-1.50.1 is installed OR gmime-2_4-2.4.8-1.2.55 is installed OR gmime-doc-2.2.23-1.50.1 is installed OR libgmime-2_0-3-2.2.23-1.50.1 is installed OR libgmime-2_4-2-2.4.8-1.2.55 is installed Definition Synopsis SUSE Linux Enterprise Server 11-SECURITY is installed AND Package Information libldap-openssl1-2_4-2-2.4.26-0.35.1 is installed OR libldap-openssl1-2_4-2-32bit-2.4.26-0.35.1 is installed OR libldap-openssl1-2_4-2-x86-2.4.26-0.35.1 is installed OR openldap2-client-openssl1-2.4.26-0.35.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND Package Information libltdl7-2.4.2-14 is installed OR libltdl7-32bit-2.4.2-14 is installed OR libtool-2.4.2-14 is installed OR libtool-32bit-2.4.2-14 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information freeradius-server-3.0.3-10 is installed OR freeradius-server-doc-3.0.3-10 is installed OR freeradius-server-krb5-3.0.3-10 is installed OR freeradius-server-ldap-3.0.3-10 is installed OR freeradius-server-libs-3.0.3-10 is installed OR freeradius-server-mysql-3.0.3-10 is installed OR freeradius-server-perl-3.0.3-10 is installed OR freeradius-server-postgresql-3.0.3-10 is installed OR freeradius-server-python-3.0.3-10 is installed OR freeradius-server-sqlite-3.0.3-10 is installed OR freeradius-server-utils-3.0.3-10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_67-60_64_21-default-8-2.1 is installed OR kgraft-patch-3_12_67-60_64_21-xen-8-2.1 is installed OR kgraft-patch-SLE12-SP1_Update_10-8-2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information apache2-2.4.23-28 is installed OR apache2-doc-2.4.23-28 is installed OR apache2-example-pages-2.4.23-28 is installed OR apache2-prefork-2.4.23-28 is installed OR apache2-utils-2.4.23-28 is installed OR apache2-worker-2.4.23-28 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP5 is installed AND Package Information accountsservice-0.6.42-16.3 is installed OR accountsservice-lang-0.6.42-16.3 is installed OR libaccountsservice0-0.6.42-16.3 is installed OR typelib-1_0-AccountsService-1_0-0.6.42-16.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12-LTSS is installed AND Package Information kgraft-patch-3_12_60-52_49-default-2-2.2 is installed OR kgraft-patch-3_12_60-52_49-xen-2-2.2 is installed OR kgraft-patch-SLE12_Update_14-2-2.2 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND autofs-5.0.9-21 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 is installed AND Package Information kgraft-patch-3_12_55-52_42-default-2-2 is installed OR kgraft-patch-3_12_55-52_42-xen-2-2 is installed OR kgraft-patch-SLE12_Update_12-2-2 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed AND sudo-1.8.10p3-2.16 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND cryptctl-1.2.6-5.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND Package Information bytefx-data-mysql-2.6.7-0.9.1 is installed OR mono-core-2.6.7-0.9.1 is installed OR mono-data-2.6.7-0.9.1 is installed OR mono-data-firebird-2.6.7-0.9.1 is installed OR mono-data-oracle-2.6.7-0.9.1 is installed OR mono-data-postgresql-2.6.7-0.9.1 is installed OR mono-data-sqlite-2.6.7-0.9.1 is installed OR mono-data-sybase-2.6.7-0.9.1 is installed OR mono-devel-2.6.7-0.9.1 is installed OR mono-extras-2.6.7-0.9.1 is installed OR mono-jscript-2.6.7-0.9.1 is installed OR mono-locale-extras-2.6.7-0.9.1 is installed OR mono-nunit-2.6.7-0.9.1 is installed OR mono-wcf-2.6.7-0.9.1 is installed OR mono-web-2.6.7-0.9.1 is installed OR mono-winforms-2.6.7-0.9.1 is installed OR mono-winfxcore-2.6.7-0.9.1 is installed OR monodoc-core-2.6.7-0.9.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-devel-24.6.0esr-0.8.1 is installed OR mozilla-nspr-devel-4.10.6-0.3.1 is installed OR mozilla-nss-devel-3.16.1-0.8.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND unixODBC_23-devel-2.3.1-0.9.40 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND Package Information libssh-0.6.3-4 is installed OR libssh-devel-0.6.3-4 is installed OR libssh-devel-doc-0.6.3-4 is installed OR libssh4-0.6.3-4 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information graphite2-1.3.1-9 is installed OR graphite2-devel-1.3.1-9 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND Package Information libquicktime-1.2.4-14.3 is installed OR libquicktime-devel-1.2.4-14.3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information libQt5Bootstrap-devel-static-5.6.2-6.12 is installed OR libQt5Concurrent-devel-5.6.2-6.12 is installed OR libQt5Core-devel-5.6.2-6.12 is installed OR libQt5Core-private-headers-devel-5.6.2-6.12 is installed OR libQt5DBus-devel-5.6.2-6.12 is installed OR libQt5DBus-private-headers-devel-5.6.2-6.12 is installed OR libQt5Gui-devel-5.6.2-6.12 is installed OR libQt5Gui-private-headers-devel-5.6.2-6.12 is installed OR libQt5Network-devel-5.6.2-6.12 is installed OR libQt5Network-private-headers-devel-5.6.2-6.12 is installed OR libQt5OpenGL-devel-5.6.2-6.12 is installed OR libQt5OpenGL-private-headers-devel-5.6.2-6.12 is installed OR libQt5OpenGLExtensions-devel-static-5.6.2-6.12 is installed OR libQt5PlatformHeaders-devel-5.6.2-6.12 is installed OR libQt5PlatformSupport-devel-static-5.6.2-6.12 is installed OR libQt5PlatformSupport-private-headers-devel-5.6.2-6.12 is installed OR libQt5PrintSupport-devel-5.6.2-6.12 is installed OR libQt5PrintSupport-private-headers-devel-5.6.2-6.12 is installed OR libQt5Sql-devel-5.6.2-6.12 is installed OR libQt5Sql-private-headers-devel-5.6.2-6.12 is installed OR libQt5Test-devel-5.6.2-6.12 is installed OR libQt5Test-private-headers-devel-5.6.2-6.12 is installed OR libQt5Widgets-devel-5.6.2-6.12 is installed OR libQt5Widgets-private-headers-devel-5.6.2-6.12 is installed OR libQt5Xml-devel-5.6.2-6.12 is installed OR libqt5-qtbase-common-devel-5.6.2-6.12 is installed OR libqt5-qtbase-devel-5.6.2-6.12 is installed OR libqt5-qtbase-private-headers-devel-5.6.2-6.12 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 is installed AND Package Information gcc48-gij-4.8.3+r212056-6 is installed OR gcc48-gij-32bit-4.8.3+r212056-6 is installed OR libgcj48-4.8.3+r212056-6 is installed OR libgcj48-32bit-4.8.3+r212056-6 is installed OR libgcj48-jar-4.8.3+r212056-6 is installed OR libgcj_bc1-4.8.3+r212056-6 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP1 is installed AND bogofilter-1.2.4-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP2 is installed AND argyllcms-1.6.3-3 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP3 is installed AND Package Information dia-0.97.3-15 is installed OR dia-lang-0.97.3-15 is installed Definition Synopsis SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND argyllcms-1.6.3-3 is installed
BACK